IP-DB.com
Türkçe English Deutsch Español
Anmelden API-Schlüssel holen
4.3Mittel

CVE-2026-121410FreeRDP before 3.32.2 Denial of Service via RDPGFX ALPHA WIRETOSURFACE_2

FreeRDP FreeRDP Veröffentlicht: (vor 10 Tagen)

Beschreibung

FreeRDP before 3.32.2 contains a denial of service vulnerability in the RDPGFX ALPHA WIRETOSURFACE_2 handler that fails to validate zero surface dimensions. A malicious RDP server can send a crafted WIRETOSURFACE_2 PDU with zero width and height, triggering an assertion or division by zero that terminates the client session.

Schwachstellentyp (CWE): CWE-369

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

HerstellerProduktVersionen
FreeRDP FreeRDP < 3.32.2, fixed 3.32.2

Ubuntu-Korrekturen

  • USN-9007-1 FreeRDP vulnerabilities Ubuntu 26.10, 26.04, 24.04 · 09.11.2026 · freerdp3

Referenzen und Patches

CPE-Treffer (NVD) (1)
  • cpe:2.3:a:freerdp:freerdp:*:*:*:*:*:*:*:* < 3.32.2

Neue CVEs im selben Produkt — Ubuntu 24.04 LTS

7.7Hoch
CVE-2026-109518

APT RCE via hard link reuse

Debian APT; Ubuntu APT

On Debian, Ubuntu, and derivative Linux distributions, an on-path attacker who can manipulate the HTTP traffic (including a malicious mirror or proxy) between an APT client and an archive server triggered by a package install can trick the client into install…