Live › vulnerability › CVE-2026-121395
FreeRDP's RemoteFX differential decoder fails an assertion when a malicious RDP server sends a crafted tile with out-of-range coefficients, aborting the client process. The sources describe a denial of service that only triggers when verbose WinPR assertions are enabled.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-03 15:21 UTC. All times on this page are UTC.
Only clients built or configured with verbose WinPR assertions are reported to crash; the trigger is a malicious RDP server that a client connects to. Systems that only connect to trusted RDP servers are lower risk. Teams that embed FreeRDP in their own tools should check which version they ship.
No product ranges from the sources yet.
xfreerdp /version, and compare it to the affected range 3.17.0 to before 3.32.2.3.32.2 or later.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
FreeRDP from 3.17.0 before 3.32.2 contains an assertion failure in the RemoteFX differential decoder when verbose WinPR assertions are enabled. A malicious RDP server can send a crafted RemoteFX tile with adjacent LL3 coefficients summing beyond signed 16-bit range to abort the client process.
This page as .md · .json · in your agent: get_signal("CVE-2026-121395")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.