CVE-2026-121951

FreeRDP 3.0.0 before 3.32.2 server-side RDP peer input parsing skips the six-byte body of a slow-path input event with an unknown message type without checking it lies within the packet's declared length, causing a WinPR stream assertion failure. A remote RDP client with an active session can sen...

CVE-2026-121951 FreeRDP 3.0.0 before 3.32.2 Denial of Service via Slow-Path Input Event

FreeRDP 3.0.0 before 3.32.2 server-side RDP peer input parsing skips the six-byte body of a slow-path input event with an unknown message type without checking it lies within the packet's declared length, causing a WinPR stream assertion failure. A remote RDP client with an active session can sen...

CVE-2026-121951

FreeRDP versions 3.0.0 before 3.32.2 are vulnerable to a Denial of Service via a slow-path input event. The issue exists in the server-side RDP peer input parsing, where the system skips the six-byte body of an unknown message type without verifying that it lies within the packet's declared lengt...

EUVD-2026-116951

FreeRDP 3.0.0 before 3.32.2 server-side RDP peer input parsing skips the six-byte body of a slow-path input event with an unknown message type without checking it lies within the packet's declared length, causing a WinPR stream assertion failure. A remote RDP client with an active session can sen...

CVE-2026-121394

FreeRDP from 3.11.0 before 3.32.2 contains an assertion failure in the RemoteFX RLGR decoder that allows malicious servers to terminate clients. Attackers controlling an RDP server can send a RemoteFX tileset with RLGR code 32767, triggering a signed narrowing assertion in rfxrlgrdecode and...

bind: bind: Denial of service via assertion failure in RPZ query processing

A flaw was found in BIND. A remote attacker can cause a denial of service DoS by sending a sequence of recursive and non-recursive queries to an affected server. When BIND is configured to handle recursive queries alongside multiple Response Policy Zones RPZ with differing recursion settings,...

bind: bind: Denial of Service via assertion failure during redirect processing

A flaw was found in BIND. A remote attacker can cause a Denial of Service DoS by sending requests that trigger an assertion failure, abruptly terminating the resolver daemon. This vulnerability occurs when the resolver is configured with both a redirect zone and strict query name minimization whi...

bind: bind: Denial of service via assertion failure in RPZ query processing

A flaw was found in BIND. A remote attacker can cause a denial of service DoS by sending a sequence of recursive and non-recursive queries to an affected server. When BIND is configured to handle recursive queries alongside multiple Response Policy Zones RPZ with differing recursion settings,...

bind: bind: Denial of Service via assertion failure during redirect processing

A flaw was found in BIND. A remote attacker can cause a Denial of Service DoS by sending requests that trigger an assertion failure, abruptly terminating the resolver daemon. This vulnerability occurs when the resolver is configured with both a redirect zone and strict query name minimization whi...

CVE-2026-121951: FreeRDP: FreeRDP 3.0.0 before 3.32.2 server-side RDP peer input parsing skips the six-byte body of a slow-path input event with…

FreeRDP 3.0.0 before 3.32.2 server-side RDP peer input parsing skips the six-byte body of a slow-path input event with an unknown message type without checking it lies within the packet's declared length, causing a WinPR stream assertion failure. A remote RDP client with an active session can sen...

PT-2026-137003

FreeRDP 3.0.0 before 3.32.2 server-side RDP peer input parsing skips the six-byte body of a slow-path input event with an unknown message type without checking it lies within the packet's declared length, causing a WinPR stream assertion failure. A remote RDP client with an active session can sen...

CVE-2026-121389

A flaw was found in FreeRDP. A malicious Remote Desktop Protocol RDP server can trigger a Denial of Service DoS by sending a malformed Device Redirection RDPDR announcement. Under configurations where diagnostic trace logging and assertions are active, processing the invalid data length triggers ...

CVE-2026-121407

A flaw was found in FreeRDP. An authenticated remote attacker can cause a Denial of Service DoS by sending a specially crafted message to the shadow server's remdesk virtual channel. Due to an inverted packet length verification check, processing the malformed data triggers an internal assertion...

CVE-2026-121393

A flaw was found in FreeRDP. A malicious Remote Desktop Protocol RDP server can cause a Denial of Service DoS by sending crafted RemoteFX graphics data to a connecting client. When the client processes malformed region rectangle coordinates, an internal assertion failure occurs, abruptly...

CVE-2026-121394

FreeRDP from 3.11.0 before 3.32.2 contains an assertion failure in the RemoteFX RLGR decoder that allows malicious servers to terminate clients. Attackers controlling an RDP server can send a RemoteFX tileset with RLGR code 32767, triggering a signed narrowing assertion in rfxrlgrdecode and...

CVE-2026-121395

FreeRDP from 3.17.0 before 3.32.2 contains an assertion failure in the RemoteFX differential decoder when verbose WinPR assertions are enabled. A malicious RDP server can send a crafted RemoteFX tile with adjacent LL3 coefficients summing beyond signed 16-bit range to abort the client process...

DEBIAN-CVE-2026-121394

FreeRDP from 3.11.0 before 3.32.2 contains an assertion failure in the RemoteFX RLGR decoder that allows malicious servers to terminate clients. Attackers controlling an RDP server can send a RemoteFX tileset with RLGR code 32767, triggering a signed narrowing assertion in rfxrlgrdecode and...

CVE-2026-121411

FreeRDP versions prior to 3.32.2 are vulnerable to a client abort condition due to improper input validation in the RDPGFX MAPSURFACETOSCALEDOUTPUT PDUs. The software fails to bound server-supplied target dimensions and output origins, which can lead to checked UINT16 cast errors or freerdp_image...

CVE-2026-121411 FreeRDP before 3.32.2 X11 Client Abort via RDPGFX Scaled Output Geometry

FreeRDP before 3.32.2 fails to bound server-supplied target dimensions and output origin in RDPGFX MAPSURFACETOSCALEDOUTPUT PDUs, allowing malicious RDP servers to abort X11 clients. Attackers can map a surface to oversized scaled output, triggering checked UINT16 cast or freerdpimagescale stride...

EUVD-2026-115926

FreeRDP from 3.11.0 before 3.32.2 contains an assertion failure in the RemoteFX RLGR decoder that allows malicious servers to terminate clients. Attackers controlling an RDP server can send a RemoteFX tileset with RLGR code 32767, triggering a signed narrowing assertion in rfxrlgrdecode and...