UBUNTU-CVE-2026-121409: High severity ubuntu/freerdp vulnerability

Published Nov 3, 2026

Updated

FreeRDP before 3.32.2 contains a denial of service vulnerability that allows malicious servers or unauthenticated peers to abort clients or proxies via oversized X.224 routing tokens. Attackers can send an oversized LoadBalanceInfo in a Server Redirection PDU, or a 240–247 byte token to a FixedTarget freerdp-proxy, triggering a tpduwriteheader assertion that crashes the process.

Affected Software

9 affected components

ubuntu/freerdp*

ubuntu/freerdp2*

ubuntu/freerdp*

ubuntu/freerdp2*

ubuntu/freerdp3*

ubuntu/freerdp2*

ubuntu/freerdp3*

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade FreeRDP to a version that resolves this vulnerability.
Fixed in 3.32.2

Event History

Nov 3, 2026

CVE Published

via OSV·03:17 PM

Data Sourced

via OSV·03:17 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

Which deployments are exposed to this denial of service?

FreeRDP clients and proxies are exposed when they process attacker-controlled RDP traffic. In particular, a malicious server can target clients through a Server Redirection PDU, and an unauthenticated peer can target a FixedTarget freerdp-proxy.

What does an attacker need to do to trigger the crash?

The attacker needs network access to send crafted RDP protocol data to the affected component. A malicious server can supply an oversized LoadBalanceInfo value, while a FixedTarget proxy can be crashed with a 240–247 byte routing token; no authentication or user interaction is required.

What is the impact of successful exploitation?

The crafted routing token triggers a tpdu_write_header assertion, aborting the affected client or proxy process. The reported impact is denial of service; no confidentiality or integrity impact is stated.

Which versions are affected?

FreeRDP versions before 3.32.2 are affected. The listed Ubuntu packages are freerdp, freerdp2, and freerdp3.

UBUNTU-CVE-2026-121409: High severity ubuntu/freerdp vulnerability

Affected Software

Remediation

Event History

Frequently Asked Questions

Which deployments are exposed to this denial of service?

What does an attacker need to do to trigger the crash?

What is the impact of successful exploitation?

Which versions are affected?

Company

Resources

Contact

Frequently Asked Questions

Which deployments are exposed to this denial of service?

What does an attacker need to do to trigger the crash?

What is the impact of successful exploitation?

Which versions are affected?