DEBIAN-CVE-2026-121390: Medium severity debian/freerdp2 vulnerability
FreeRDP 3.0.0 before 3.32.2 built with WITHAAD=ON contains a reachable assertion because its ARM gateway response parser accepts a missing or non-string redirectedServerCert field and passes a null buffer to the certificate parser. A malicious or malformed user-selected gateway can return such a response to abort the client process.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/freerdp3to a version that resolves this vulnerability.Fixed in 3.32.2+dfsg-1
Event History
Frequently Asked Questions
Which deployments are exposed to this issue?
FreeRDP versions from 3.0.0 before 3.32.2 are affected only when built with WITH_AAD=ON. The listed Debian packages are freerdp3 and freerdp2, but the provided data does not identify which package builds enable that option.
What must an attacker do to trigger the crash?
The user must select a malicious or malformed ARM gateway. That gateway can return a response in which redirectedServerCert is missing or is not a string, causing the FreeRDP client process to abort.
What is the impact of successful exploitation?
The described impact is client-process termination, resulting in a denial of service. The supplied severity vector indicates no confidentiality or integrity impact.