Live › vulnerability › CVE-2026-121411
FreeRDP before 3.32.2 does not bound server-supplied target dimensions and output origin in RDPGFX MAPSURFACETOSCALEDOUTPUT PDUs. A malicious RDP server can make the client abort, which denies service to the connected user.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-03 15:21 UTC. All times on this page are UTC.
Only FreeRDP clients that connect to RDP servers the team does not control are exposed, since the flaw needs a malicious server to send the crafted PDU. Clients that only connect to trusted internal servers carry much less risk. The sources do not describe further conditions.
No product ranges from the sources yet.
xfreerdp --version, and see whether it is below 3.32.2.3.32.2 or later.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
FreeRDP before 3.32.2 fails to bound server-supplied target dimensions and output origin in RDPGFX MAPSURFACETOSCALEDOUTPUT PDUs, allowing malicious RDP servers to abort X11 clients. Attackers can map a surface to oversized scaled output, triggering checked UINT16 cast or freerdp_image_scale stride assertion failures that terminate the client.
This page as .md · .json · in your agent: get_signal("CVE-2026-121411")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.