CVE-2026-121395

FreeRDP from 3.17.0 before 3.32.2 contains an assertion failure in the RemoteFX differential decoder when verbose WinPR assertions are enabled. A malicious RDP server can send a crafted RemoteFX tile with adjacent LL3 coefficients summing beyond signed 16-bit range to abort the client process...

EUVD-2026-115927

FreeRDP from 3.17.0 before 3.32.2 contains an assertion failure in the RemoteFX differential decoder when verbose WinPR assertions are enabled. A malicious RDP server can send a crafted RemoteFX tile with adjacent LL3 coefficients summing beyond signed 16-bit range to abort the client process...

CVE-2026-121395

The FreeRDP application versions 3.17.0 through 3.32.2 are vulnerable to a Denial of Service (DoS) condition due to an assertion failure in the RemoteFX differential decoder . When verbose WinPR assertions are enabled, a malicious RDP server can transmit a crafted RemoteFX tile with adjacent LL3 ...