DEBIAN-CVE-2026-121410: Medium severity debian/freerdp2 vulnerability
FreeRDP before 3.32.2 contains a denial of service vulnerability in the RDPGFX ALPHA WIRETOSURFACE2 handler that fails to validate zero surface dimensions. A malicious RDP server can send a crafted WIRETOSURFACE2 PDU with zero width and height, triggering an assertion or division by zero that terminates the client session.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/freerdp3to a version that resolves this vulnerability.Fixed in 3.32.2+dfsg-1
Event History
Frequently Asked Questions
Who can exploit this issue?
An attacker must control, or be able to impersonate, an RDP server that a FreeRDP client connects to. Exploitation requires the client user to initiate or accept that connection.
What is the impact on an affected client?
A malicious server can send a crafted RDPGFX WIRETOSURFACE_2 PDU with zero width and height. This can trigger an assertion failure or division by zero and terminate the FreeRDP client session.
Which versions are affected?
FreeRDP versions before 3.32.2 are affected. The listed Debian packages are freerdp3 and freerdp2, but no package-specific fixed version is provided.