Bug 2565859 (CVE-2026-121407) - CVE-2026-121407 freerdp: freerdp: Denial of Service via malformed remdesk channel payload
Summary: CVE-2026-121407 freerdp: freerdp: Denial of Service via malformed remdesk cha...
Keywords:
Status: NEW
Alias: CVE-2026-121407
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Product Security
QA Contact:
URL:
Whiteboard:
Depends On: 2565991 2565993
Blocks:
TreeView+ depends on / blocked
 
Reported: 2026-11-03 15:03 UTC by OSIDB Bzimport
Modified: 2026-11-03 17:20 UTC (History)
2 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments (Terms of Use)

Description OSIDB Bzimport 2026-11-03 15:03:59 UTC 
FreeRDP before 3.32.2 contains a denial of service vulnerability in the shadow server's remdesk_server_thread that allows authenticated clients to crash the process via an inverted PDU length check. Attackers can send an 8192-byte remdesk payload declaring an eight-byte PDU length to trigger a fatal Stream_Seek assertion, aborting the server and dropping sessions.
Note You need to log in before you can comment on or make changes to this bug.