UBUNTU-CVE-2026-121411: Low severity ubuntu/freerdp vulnerability

Published Nov 3, 2026

Updated

FreeRDP before 3.32.2 fails to bound server-supplied target dimensions and output origin in RDPGFX MAPSURFACETOSCALEDOUTPUT PDUs, allowing malicious RDP servers to abort X11 clients. Attackers can map a surface to oversized scaled output, triggering checked UINT16 cast or freerdpimagescale stride assertion failures that terminate the client.

Affected Software

9 affected components

ubuntu/freerdp*

ubuntu/freerdp2*

ubuntu/freerdp*

ubuntu/freerdp2*

ubuntu/freerdp3*

ubuntu/freerdp2*

ubuntu/freerdp3*

Event History

Nov 3, 2026

CVE Published

via OSV·03:17 PM

Data Sourced

via OSV·03:17 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

Who is exposed to this issue?

Users running an X11-based FreeRDP client are exposed when they connect to a malicious RDP server. The affected Ubuntu package names listed are freerdp2, freerdp3, and freerdp.

What does an attacker need to do to trigger the problem?

The attacker must operate or control an RDP server and cause a user to connect to it. The server can then send a crafted RDPGFX MAPSURFACETOSCALEDOUTPUT PDU with oversized scaled-output dimensions or output origin values.

What is the practical impact of successful exploitation?

Successful exploitation terminates the X11 FreeRDP client through a checked UINT16 cast failure or a freerdp_image_scale stride assertion failure. The provided data indicates an availability impact only, with no confidentiality or integrity impact.

How can I determine whether my FreeRDP installation is affected?

FreeRDP versions before 3.32.2 are affected according to the provided data. Check the installed FreeRDP version and whether the client is used with X11.

UBUNTU-CVE-2026-121411: Low severity ubuntu/freerdp vulnerability

Affected Software

Event History

Frequently Asked Questions

Who is exposed to this issue?

What does an attacker need to do to trigger the problem?

What is the practical impact of successful exploitation?

How can I determine whether my FreeRDP installation is affected?

Company

Resources

Contact

Frequently Asked Questions

Who is exposed to this issue?

What does an attacker need to do to trigger the problem?

What is the practical impact of successful exploitation?

How can I determine whether my FreeRDP installation is affected?