UBUNTU-CVE-2026-121399: Medium severity ubuntu/freerdp vulnerability

Published Nov 3, 2026

Updated

FreeRDP before 3.32.2 contains a memory allocation vulnerability in rdgreceivepacket that allows a malicious RD Gateway to force a 2 GiB client allocation before tunnel authentication. Attackers can send an eight-byte RDG header declaring packet length 0x7FFFFFFF to trigger pre-authentication memory exhaustion and denial of service.

Affected Software

9 affected components

ubuntu/freerdp*

ubuntu/freerdp2*

ubuntu/freerdp*

ubuntu/freerdp2*

ubuntu/freerdp3*

ubuntu/freerdp2*

ubuntu/freerdp3*

Event History

Nov 3, 2026

CVE Published

via OSV·03:17 PM

Data Sourced

via OSV·03:17 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

Which systems are exposed to this issue?

FreeRDP clients before 3.32.2 are exposed when they connect to an RD Gateway controlled by an attacker. The affected Ubuntu package names listed are freerdp, freerdp2, and freerdp3.

Does an attacker need credentials or successful tunnel authentication?

No. A malicious RD Gateway can trigger the allocation before tunnel authentication by sending a crafted eight-byte RDG header, so no credentials or authenticated tunnel access are required.

What is the practical impact on an affected client?

The crafted header declares a packet length of 0x7FFFFFFF, causing the client to attempt a 2 GiB allocation. This can exhaust memory and result in denial of service.

UBUNTU-CVE-2026-121399: Medium severity ubuntu/freerdp vulnerability

Affected Software

Event History

Frequently Asked Questions

Which systems are exposed to this issue?

Does an attacker need credentials or successful tunnel authentication?

What is the practical impact on an affected client?

Company

Resources

Contact

Frequently Asked Questions

Which systems are exposed to this issue?

Does an attacker need credentials or successful tunnel authentication?

What is the practical impact on an affected client?