Bug 2565927 (CVE-2026-121406) - CVE-2026-121406 freerdp: freerdp: Denial of Service via zero-output graphics payload
Summary: CVE-2026-121406 freerdp: freerdp: Denial of Service via zero-output graphics ...
Keywords:
Status: NEW
Alias: CVE-2026-121406
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Product Security
QA Contact:
URL:
Whiteboard:
Depends On: 2566785 2566786
Blocks:
TreeView+ depends on / blocked
 
Reported: 2026-11-03 16:26 UTC by OSIDB Bzimport
Modified: 2026-11-04 09:37 UTC (History)
2 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments (Terms of Use)

Description OSIDB Bzimport 2026-11-03 16:26:58 UTC 
FreeRDP before 3.32.2 allows a client assertion abort because rdpgfx_on_data_received rejects only negative zgfx_decompress status and passes the resulting null output pointer to Stream_StaticConstInit. A malicious RDP server can send a zero-output ZGFX payload on the RDPGFX channel after session activation to terminate the client.
Note You need to log in before you can comment on or make changes to this bug.