CVE-2026-121402
Analyzed Analyzed - Analysis Complete

NULL Pointer Dereference in FreeRDP via Malicious RDPGFX ResetGraphics PDU

Publication date: 2026-11-03

Last updated on: 2026-11-03

Assigner: VulnCheck

Description
FreeRDP before 3.32.2 contains a NULL pointer dereference vulnerability that allows malicious RDP servers to crash xfreerdp clients by sending a zero-width RDPGFX ResetGraphics PDU. The failed resize in gdi_resize_ex leaves the primary display null without ending the session, so a later bitmap update crashes the client in gdi_Bitmap_Paint.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-11-03
Last Modified
2026-11-03
Generated
2026-11-03
AI Q&A
2026-11-03
EPSS Evaluated
N/A
NVD
CVE-2026-121402
EUVD
EUVD-2026-115934

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
freerdp freerdp to 3.32.2 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-476 The product dereferences a pointer that it expects to be valid but is NULL.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

FreeRDP before version 3.32.2 has a NULL pointer dereference flaw. Malicious RDP servers can exploit this by sending a zero-width RDPGFX ResetGraphics PDU to crash xfreerdp clients. The issue occurs during a failed resize operation in gdi_resize_ex, which leaves the primary display null without ending the session. Later bitmap updates then cause a crash in gdi_Bitmap_Paint.

Impact Analysis

If you use an affected FreeRDP client to connect to a malicious RDP server, the client may crash unexpectedly. This could lead to denial of service, disrupting your remote desktop sessions. No data theft or privilege escalation is indicated by the vulnerability description.

Mitigation Strategies

Update FreeRDP to version 3.32.2 or later to address the NULL pointer dereference vulnerability in RDPGFX ResetGraphics PDU handling.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-121402. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart

Security Radar

News mentioning this vulnerability
Loading related security news...