Skip to content

CVE record · 1 source

CVE-2026-121394

CVSS 6.5

FreeRDP from 3.11.0 before 3.32.2 contains an assertion failure in the RemoteFX RLGR decoder that allows malicious servers to terminate clients.

Vendor: FreeRDP
Product: FreeRDP
CVSS v3.1: 6.5 AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Weakness: CWE-617
Exposure class: Remote access

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

36

CVE NVD 2h ago

FreeRDP from 3.11.0 before 3.32.2 contains an assertion failure in the RemoteFX RLGR decoder that allows malicious servers to terminate clients.

FreeRDP from 3.11.0 before 3.32.2 contains an assertion failure in the RemoteFX RLGR decoder that allows malicious servers to terminate clients. Attackers controlling an RDP server can send a RemoteFX tileset with RLGR code…

CVSS 6.5 CVE-2026-121394 FreeRDP