CVE-2026-121410

The record

FreeRDP before 3.32.2 contains a denial of service vulnerability in the RDPGFX ALPHA WIRETOSURFACE_2 handler that fails to validate zero surface dimensions. A malicious RDP server can send a crafted WIRETOSURFACE_2 PDU with zero width and height, triggering an assertion or division by zero that terminates the client session.

Affected packages

Related vulnerabilities

• CVE-2026-65160 NVIDIA nvJPEG contains a vulnerability where an attacker could cause a divide-by-zero. CWE-369
• CVE-2026-59959 SAIL is a cross-platform library for loading and saving images with support for… CWE-369
• CVE-2026-112054 Schroedinger libschroedinger through 1.0.11 contains a divide by zero vulnerability that… CWE-369
• CVE-2025-55653 GPAC MP4Box v2.4 was discovered to contain a floating point exception in the… CWE-369
• CVE-2026-109246 FreeRDP before 3.32.0 contains a divide-by-zero vulnerability in the freerdp-shadow-cli… CWE-369
• CVE-2026-93589 ImageMagick before 7.1.2-31 and 6.9.13-56 contains a division-by-zero flaw in the FLIF… CWE-369
• CVE-2026-15417 In the silabser.sys Windows 8 driver for CP210x devices, a local unprivileged user can… CWE-369
• CVE-2026-6244 libpcap BPF interpreter for the 'div #k' and 'mod #k' ALU instructions does not check… CWE-369