UBUNTU-CVE-2026-121397: Medium severity ubuntu/freerdp vulnerability

Published Nov 3, 2026

Updated

FreeRDP before 3.32.2 contains a heap buffer over-read vulnerability in savepngtobuffer() that allows malicious RDP servers to leak client memory by sending 16 bpp DIB clipboard data. Attackers can offer a CFDIB BIBITFIELDS image that, when converted to PNG for a local application, embeds client heap bytes into the clipboard image.

Affected Software

9 affected components

ubuntu/freerdp*

ubuntu/freerdp2*

ubuntu/freerdp*

ubuntu/freerdp2*

ubuntu/freerdp3*

ubuntu/freerdp2*

ubuntu/freerdp3*

Event History

Nov 3, 2026

CVE Published

via OSV·03:17 PM

Data Sourced

via OSV·03:17 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

Who is exposed to this issue?

Clients using affected FreeRDP packages are exposed when they connect to a malicious RDP server that supplies crafted clipboard image data. The impact is disclosure of client-side heap memory to the remote server through a clipboard image.

What must an attacker do to exploit it?

An attacker needs to operate or control an RDP server that the victim connects to. The server sends a 16 bpp CF_DIB image using BI_BITFIELDS encoding, which is converted to PNG for a local application; user interaction is required because the victim must connect to the server.

How can I determine whether a system is affected?

Check whether an installed Ubuntu FreeRDP package is older than 3.32.2. The listed affected package families are ubuntu/freerdp, ubuntu/freerdp2, and ubuntu/freerdp3.

UBUNTU-CVE-2026-121397: Medium severity ubuntu/freerdp vulnerability

Affected Software

Event History

Frequently Asked Questions

Who is exposed to this issue?

What must an attacker do to exploit it?

How can I determine whether a system is affected?

Company

Resources

Contact

Frequently Asked Questions

Who is exposed to this issue?

What must an attacker do to exploit it?

How can I determine whether a system is affected?