CVE-2026-121394
FreeRDP from 3.11.0 before 3.32.2 contains an assertion failure in the RemoteFX RLGR decoder that allows malicious servers to terminate clients. Attackers controlling an RDP server can send a RemoteFX tileset with RLGR code 32767, triggering a signed narrowing assertion in rfx_rlgr_decode and crashing the client.
AI analysis
Not analysed yet.
Claude analyses new vulnerabilities after each morning's collection, most important first, up to a daily limit. The verified data on this page is complete without it.
| Product | Affected versions | Fixed in | Source |
|---|---|---|---|
| freerdpfreerdp | >= 3.11.0, < 3.32.2 | None listed | NVD |
0.3%17th percentile
Bar shows rank among all scored CVEs.
Published
First publication at the source
Collected
First seen by Baba Yaga Security
Last modified
Latest change at the source