CVE-2026-121406FreeRDP before 3.32.2 Client Denial of Service via Zero-Output ZGFX Payload

Descripción

FreeRDP before 3.32.2 allows a client assertion abort because rdpgfx_on_data_received rejects only negative zgfx_decompress status and passes the resulting null output pointer to Stream_StaticConstInit. A malicious RDP server can send a zero-output ZGFX payload on the RDPGFX channel after session activation to terminate the client.

Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.

Productos y versiones afectados

Correcciones de Ubuntu

• USN-9007-1 FreeRDP vulnerabilities Ubuntu 26.10, 26.04, 24.04 · 09.11.2026 · freerdp3

Referencias y parches

• GitHub Security Advisory (GHSA-2c9x-4gr7-hrwx) vendor-advisoryVendor Advisory
• VulnCheck Advisory: FreeRDP before 3.32.2 Client Denial of Service via Zero-Output ZGFX Payload third-party-advisoryThird Party Advisory