CVE-2026-121399

FreeRDP before 3.32.2 contains a memory allocation vulnerability in rdgreceivepacket that allows a malicious RD Gateway to force a 2 GiB client allocation before tunnel authentication. Attackers can send an eight-byte RDG header declaring packet length 0x7FFFFFFF to trigger pre-authentication...

EUVD-2026-115931

FreeRDP before 3.32.2 contains a memory allocation vulnerability in rdgreceivepacket that allows a malicious RD Gateway to force a 2 GiB client allocation before tunnel authentication. Attackers can send an eight-byte RDG header declaring packet length 0x7FFFFFFF to trigger pre-authentication...

CVE-2026-121399

FreeRDP versions before 3.32.2 are vulnerable to a memory allocation flaw in the rdg_receive_packet function. A malicious RD Gateway can trigger a denial of service by sending an eight-byte RDG header with a declared packet length of 0x7FFFFFFF . This forces the client to perform a 2 GiB memory a...

CVE-2026-121399: FreeRDP: FreeRDP before 3.32.2 contains a memory allocation vulnerability in rdg_receive_packet that allows a malicious RD…

FreeRDP before 3.32.2 contains a memory allocation vulnerability in rdgreceivepacket that allows a malicious RD Gateway to force a 2 GiB client allocation before tunnel authentication. Attackers can send an eight-byte RDG header declaring packet length 0x7FFFFFFF to trigger pre-authentication...