CVE-2026-121410

FreeRDP before 3.32.2 contains a denial of service vulnerability in the RDPGFX ALPHA WIRETOSURFACE2 handler that fails to validate zero surface dimensions. A malicious RDP server can send a crafted WIRETOSURFACE2 PDU with zero width and height, triggering an assertion or division by zero that...

CVE-2026-121410

FreeRDP versions prior to 3.32.2 are vulnerable to a Denial of Service condition within the RDPGFX ALPHA WIRETOSURFACE_2 handler. The root cause is a failure to validate zero surface dimensions; specifically, a malicious RDP server can transmit a crafted WIRETOSURFACE_2 PDU with zero width and he...

CVE-2026-121410: FreeRDP: FreeRDP before 3.32.2 contains a denial of service vulnerability in the RDPGFX ALPHA WIRETOSURFACE_2 handler that fails…

FreeRDP before 3.32.2 contains a denial of service vulnerability in the RDPGFX ALPHA WIRETOSURFACE2 handler that fails to validate zero surface dimensions. A malicious RDP server can send a crafted WIRETOSURFACE2 PDU with zero width and height, triggering an assertion or division by zero that...