DEBIAN-CVE-2026-121394: Medium severity debian/freerdp2 vulnerability
FreeRDP from 3.11.0 before 3.32.2 contains an assertion failure in the RemoteFX RLGR decoder that allows malicious servers to terminate clients. Attackers controlling an RDP server can send a RemoteFX tileset with RLGR code 32767, triggering a signed narrowing assertion in rfxrlgrdecode and crashing the client.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/freerdp3to a version that resolves this vulnerability.Fixed in 3.32.2+dfsg-1
Event History
Frequently Asked Questions
Who can exploit this issue?
An attacker must control an RDP server that a FreeRDP client connects to. Exploitation requires the client user to initiate or accept that connection, after which the server can send the crafted RemoteFX tileset.
What is the impact of a successful exploit?
The malicious server can terminate the FreeRDP client by triggering an assertion failure in the RemoteFX RLGR decoder. The provided data indicates a denial-of-service impact, with no confidentiality or integrity impact.
Which versions are affected?
FreeRDP versions from 3.11.0 before 3.32.2 are affected according to the available information. The listed Debian software packages are debian/freerdp3 and debian/freerdp2.