CVE-2026-121386: FreeRDP before 3.32.2 Denial of Service via WinPR PNG/JPEG Image Readers

Q: Which deployments are exposed to this issue?

FreeRDP clients before version 3.32.2 are exposed when they process clipboard image payloads from an RDP server or a man-in-the-middle attacker. The issue affects the client, not a server merely because it accepts RDP connections.

Q: What does an attacker need to do to trigger the denial of service?

An attacker needs to operate a malicious RDP server or be able to modify traffic as a man in the middle, then provide a malformed PNG or truncated JPEG clipboard payload. No authentication or user interaction is required according to the supplied vector.

Q: What is the impact if exploitation succeeds?

The FreeRDP client can abort or exit, causing a denial of service. The provided data does not indicate confidentiality or integrity impact.

Q: What is the available remediation?

Upgrade FreeRDP to version 3.32.2 or later. The supplied information does not provide an alternative workaround for environments that cannot immediately upgrade.

Published Nov 3, 2026

Updated

FreeRDP before 3.32.2 contains a denial of service vulnerability in WinPR's winprreadpngfrombuffer() and winprconvertfromjpeg(), which lack libpng/libjpeg error handling. A malicious RDP server or MITM can offer a malformed PNG or truncated JPEG clipboard payload, causing the client to abort or exit.

Affected Software

1 affected component

FreeRDP freerdp<3.32.2

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade debian/freerdp3 to a version that resolves this vulnerability.
Fixed in 3.32.2+dfsg-1
Upgrade
Upgrade debian/freerdp3 to a version that resolves this vulnerability.
Fixed in 3.32.2+dfsg-1Fixed in 3.33.0+dfsg-1

Event History

Nov 3, 2026

CVE Published

via MITRE·02:27 PM

Data Sourced

via MITRE·02:27 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·03:17 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

Which deployments are exposed to this issue?

FreeRDP clients before version 3.32.2 are exposed when they process clipboard image payloads from an RDP server or a man-in-the-middle attacker. The issue affects the client, not a server merely because it accepts RDP connections.

What does an attacker need to do to trigger the denial of service?

An attacker needs to operate a malicious RDP server or be able to modify traffic as a man in the middle, then provide a malformed PNG or truncated JPEG clipboard payload. No authentication or user interaction is required according to the supplied vector.

What is the impact if exploitation succeeds?

The FreeRDP client can abort or exit, causing a denial of service. The provided data does not indicate confidentiality or integrity impact.

What is the available remediation?

Upgrade FreeRDP to version 3.32.2 or later. The supplied information does not provide an alternative workaround for environments that cannot immediately upgrade.

CVE-2026-121386: FreeRDP before 3.32.2 Denial of Service via WinPR PNG/JPEG Image Readers

Affected Software

Remediation

Event History

Frequently Asked Questions

Which deployments are exposed to this issue?

What does an attacker need to do to trigger the denial of service?

What is the impact if exploitation succeeds?

What is the available remediation?

Company

Resources

Contact

Frequently Asked Questions

Which deployments are exposed to this issue?

What does an attacker need to do to trigger the denial of service?

What is the impact if exploitation succeeds?

What is the available remediation?