CVE-2026-121395Medium· 6.5▾ SunlitFreeRDP from 3.17.0 before 3.32.2 contains an assertion failure in the RemoteFX differential decoder when verbose WinPR assertions are enabled. A malicious RDP server can send a crafted RemoteFX tile with adjacent LL3 coefficients summin…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 35.8 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Nov 5.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
0.3%
FreeRDP from 3.17.0 before 3.32.2 contains an assertion failure in the RemoteFX differential decoder when verbose WinPR assertions are enabled. A malicious RDP server can send a crafted RemoteFX tile with adjacent LL3 coefficients summing beyond signed 16-bit range to abort the client process.
FreeRDP >= 3.17.0 < 3.32.2Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-121951High· 7.5FreeRDP 3.0.0 before 3.32.2 Denial of Service via Slow-Path Input Event
CVE-2026-121960High· 7.5FreeRDP before 3.32.2 Unauthenticated Denial of Service via CredSSP TSRequest
CVE-2026-121396Medium· 4.3FreeRDP 3.0.0 before 3.32.2 denial of service via RTS padding assertion
CVE-2026-121409Medium· 5.9FreeRDP before 3.32.2 Denial of Service via Oversized X.224 Routing Token
CVE-2026-121389Low· 3.1FreeRDP 3.27.0 before 3.32.2 Client DoS via RDPDR Device Announcement Logging
CVE-2026-121393Medium· 6.5FreeRDP 3.0.0 before 3.32.2 Denial of Service via RemoteFX Region Assertion