CVE-2026-121411

FreeRDP before 3.32.2 fails to bound server-supplied target dimensions and output origin in RDPGFX MAPSURFACETOSCALEDOUTPUT PDUs, allowing malicious RDP servers to abort X11 clients. Attackers can map a surface to oversized scaled output, triggering checked UINT16 cast or freerdpimagescale stride...

CVE-2026-121411

FreeRDP versions prior to 3.32.2 are vulnerable to a client abort condition due to improper input validation in the RDPGFX MAPSURFACETOSCALEDOUTPUT PDUs. The software fails to bound server-supplied target dimensions and output origins, which can lead to checked UINT16 cast errors or freerdp_image...

EUVD-2026-115943

FreeRDP before 3.32.2 fails to bound server-supplied target dimensions and output origin in RDPGFX MAPSURFACETOSCALEDOUTPUT PDUs, allowing malicious RDP servers to abort X11 clients. Attackers can map a surface to oversized scaled output, triggering checked UINT16 cast or freerdpimagescale stride...

CVE-2026-121411: FreeRDP: FreeRDP before 3.32.2 fails to bound server-supplied target dimensions and output origin in RDPGFX…

FreeRDP before 3.32.2 fails to bound server-supplied target dimensions and output origin in RDPGFX MAPSURFACETOSCALEDOUTPUT PDUs, allowing malicious RDP servers to abort X11 clients. Attackers can map a surface to oversized scaled output, triggering checked UINT16 cast or freerdpimagescale stride...