CVE-2026-121393

FreeRDP from 3.0.0 before 3.32.2 contains a denial of service vulnerability that allows malicious RDP servers to abort clients built with verbose WinPR assertions by sending crafted RemoteFX region rectangles. Attackers can supply a rectangle with x set to 65535 alongside a SurfaceBits destinatio...

EUVD-2026-115925

FreeRDP from 3.0.0 before 3.32.2 contains a denial of service vulnerability that allows malicious RDP servers to abort clients built with verbose WinPR assertions by sending crafted RemoteFX region rectangles. Attackers can supply a rectangle with x set to 65535 alongside a SurfaceBits destinatio...

CVE-2026-121393 FreeRDP 3.0.0 before 3.32.2 Denial of Service via RemoteFX Region Assertion

FreeRDP from 3.0.0 before 3.32.2 contains a denial of service vulnerability that allows malicious RDP servers to abort clients built with verbose WinPR assertions by sending crafted RemoteFX region rectangles. Attackers can supply a rectangle with x set to 65535 alongside a SurfaceBits destinatio...

CVE-2026-121393

FreeRDP versions 3.0.0 before 3.32.2 are vulnerable to a denial of service (DoS) condition via a RemoteFX Region Assertion . The root cause is a 16-bit coordinate assertion within the rfx_process_message function, triggered when a malicious RDP server sends crafted RemoteFX region rectangles. Spe...