Skip to content

CVE record · 1 source

CVE-2026-121411

CVSS 3.1

FreeRDP before 3.32.2 fails to bound server-supplied target dimensions and output origin in RDPGFX MAPSURFACETOSCALEDOUTPUT PDUs, allowing malicious…

Vendor: FreeRDP
Product: FreeRDP
CVSS v3.1: 3.1 AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L
Weakness: CWE-20
Exposure class: Remote access

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

33

CVE NVD 4h ago

FreeRDP before 3.32.2 fails to bound server-supplied target dimensions and output origin in RDPGFX MAPSURFACETOSCALEDOUTPUT PDUs, allowing malicious…

FreeRDP before 3.32.2 fails to bound server-supplied target dimensions and output origin in RDPGFX MAPSURFACETOSCALEDOUTPUT PDUs, allowing malicious RDP servers to abort X11 clients. Attackers can map a surface to oversized…

CVSS 3.1 CVE-2026-121411 FreeRDP