CyberRota Analysis
AI-GeneratedFreeRDP versions prior to 3.29.0 are vulnerable to a denial-of-service condition due to a reachable assertion failure in the serial device redirection feature. When a server sends an unsupported IOCTL request with a non-zero OutputBufferLength, it can lead to an abort of the client process. Organizations using FreeRDP with serial device redirection enabled should prioritize this vulnerability to mitigate potential service disruptions.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
FreeRDP before 3.29.0 contains a reachable assertion (WINPR_ASSERT(OutputBufferLength == BytesReturned)) in serial_process_irp_device_control() in channels/serial/client/serial_main.c. When serial device redirection is enabled and a server-controlled IRP_MJ_DEVICE_CONTROL request specifies an unsupported IOCTL with a non-zero OutputBufferLength, CommDeviceIoControl() can fail with BytesReturned = 0, causing the mismatch to trigger the assertion and abort the client process (denial of service).