Live › vulnerability › CVE-2026-121393
FreeRDP from 3.0.0 before 3.32.2 lets a malicious RDP server send crafted RemoteFX region rectangles that trigger a 16-bit coordinate assertion in rfx_process_message. The assertion terminates the client process, causing a denial of service.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-03 15:21 UTC. All times on this page are UTC.
Only FreeRDP clients built with verbose WinPR assertions can be crashed, and the trigger comes from a malicious RDP server the client connects to. Teams that only run FreeRDP against trusted servers, or use non-verbose builds, are less exposed. The sources do not say whether other clients are affected.
No product ranges from the sources yet.
xfreerdp --version.3.32.2 or later, per the NVD range.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
FreeRDP from 3.0.0 before 3.32.2 contains a denial of service vulnerability that allows malicious RDP servers to abort clients built with verbose WinPR assertions by sending crafted RemoteFX region rectangles. Attackers can supply a rectangle with x set to 65535 alongside a SurfaceBits destination left of 1, triggering a 16-bit coordinate assertion in rfx_process_message that terminates the client process.
This page as .md · .json · in your agent: get_signal("CVE-2026-121393")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.