Is CVE-2026-121410 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-121410?

CVE-2026-121410 has a CVSS v3 severity of MEDIUM (4.3).

What does CVE-2026-121410 affect?

CVE-2026-121410 affects freerdp.

Back

CVE-2026-121410

Monitor on ThreatCluster

Description

FreeRDP before 3.32.2 contains a denial of service vulnerability in the RDPGFX ALPHA WIRETOSURFACE_2 handler that fails to validate zero surface dimensions. A malicious RDP server can send a crafted WIRETOSURFACE_2 PDU with zero width and height, triggering an assertion or division by zero that terminates the client session.