UBUNTU-CVE-2026-121394: High severity ubuntu/freerdp vulnerability
FreeRDP from 3.11.0 before 3.32.2 contains an assertion failure in the RemoteFX RLGR decoder that allows malicious servers to terminate clients. Attackers controlling an RDP server can send a RemoteFX tileset with RLGR code 32767, triggering a signed narrowing assertion in rfxrlgrdecode and crashing the client.
Affected Software
Event History
Frequently Asked Questions
Who is exposed to this issue?
Clients using affected FreeRDP versions are exposed when they connect to an attacker-controlled or otherwise malicious RDP server. The server can send a crafted RemoteFX tileset that crashes the client.
Does exploitation require credentials or interaction from the client user?
The attack requires no attacker privileges, but the client user must interact by connecting to the malicious RDP server. Exploitation is performed remotely by the server during the RDP session.
What is the impact of a successful exploit?
A successful exploit terminates the FreeRDP client through an assertion failure in the RemoteFX RLGR decoder. The provided information indicates an availability impact, with no confidentiality or integrity impact.
Which versions are affected?
FreeRDP versions from 3.11.0 up to, but not including, 3.32.2 are affected. Updating to 3.32.2 or later addresses the affected version range.