Log in Start free

Vulnerability · Published Nov 3, 2026 · Assigned by VulnCheck

CVE-2026-121402FreeRDP before 3.32.2 X11 Client Crash via Zero-Width RDPGFX ResetGraphics

Medium 6.5

In plain English

A medium-severity null pointer dereference in FreeRDP from FreeRDP. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 17% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)6.5Medium
Exploit odds (30 days)0.3%top 83.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known

Official description

FreeRDP before 3.32.2 contains a NULL pointer dereference vulnerability that allows malicious RDP servers to crash xfreerdp clients by sending a zero-width RDPGFX ResetGraphics PDU. The failed resize in gdi_resize_ex leaves the primary display null without ending the session, so a later bitmap update crashes the client in gdi_Bitmap_Paint.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
AlmaLinux:10freerdp2:3.32.2-1.el10_2ALSA-2026:94514
AlmaLinux:10freerdp-devel2:3.32.2-1.el10_2ALSA-2026:94514
AlmaLinux:10freerdp-libs2:3.32.2-1.el10_2ALSA-2026:94514
AlmaLinux:10freerdp-server2:3.32.2-1.el10_2ALSA-2026:94514
AlmaLinux:10libwinpr2:3.32.2-1.el10_2ALSA-2026:94514
AlmaLinux:10libwinpr-devel2:3.32.2-1.el10_2ALSA-2026:94514
Debian:12freerdp2no fix listedDEBIAN-CVE-2026-121402
Debian:13freerdp3no fix listedDEBIAN-CVE-2026-121402
Debian:14freerdp33.32.2+dfsg-1DEBIAN-CVE-2026-121402
Ubuntu:22.04:LTSfreerdp2no fix listedUBUNTU-CVE-2026-121402
Ubuntu:24.04:LTSfreerdp3no fix listedUBUNTU-CVE-2026-121402
Ubuntu:26.04:LTSfreerdp3no fix listedUBUNTU-CVE-2026-121402
Ubuntu:26.10freerdp3no fix listedUBUNTU-CVE-2026-121402

Affected products (as reported)

VendorProductVersions
FreeRDP FreeRDP 0 – before 3.32.2

Weakness: CWE-476 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

References