DEBIAN-CVE-2026-121386: High severity debian/freerdp2 vulnerability
FreeRDP before 3.32.2 contains a denial of service vulnerability in WinPR's winprreadpngfrombuffer() and winprconvertfromjpeg(), which lack libpng/libjpeg error handling. A malicious RDP server or MITM can offer a malformed PNG or truncated JPEG clipboard payload, causing the client to abort or exit.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/freerdp3to a version that resolves this vulnerability.Fixed in 3.32.2+dfsg-1
Event History
Frequently Asked Questions
Who is exposed to this issue?
FreeRDP clients that connect to a malicious RDP server, or whose RDP connection can be intercepted and modified by a man-in-the-middle attacker, are exposed. The impact is denial of service: the client can abort or exit.
What does an attacker need to do to trigger the denial of service?
The attacker must cause the client to receive a malformed PNG clipboard payload or a truncated JPEG clipboard payload. This can be done by a malicious server or by modifying traffic as a man-in-the-middle.
Which versions are affected?
FreeRDP versions before 3.32.2 are affected. The listed Debian software packages are freerdp3 and freerdp2.