CVE-2026-67305

UNKNOWN 0.0

FreeRDP Windows Client before 3.29.0 Heap Buffer Overflow via Cliprdr

CVSS Score

0.0

EPSS Score

0.0%

EPSS Percentile

0th

FreeRDP Windows client before 3.29.0 contains a heap buffer overflow vulnerability in the clipboard virtual channel when processing CLIPRDR_FILE_CONTENTS_RESPONSE PDUs without validating the server-provided size against the destination buffer. A malicious RDP server can send a response with a data payload significantly larger than requested, causing arbitrary heap memory corruption that may enable remote code execution when a user performs a paste operation.

CWE	CWE-122
Vendor	freerdp
Product	freerdp
Published	Aug 1, 2026

Stay Ahead of the Next One

Get instant alerts for freerdp freerdp

Be the first to know when new unknown vulnerabilities affecting freerdp freerdp are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

FreeRDP / FreeRDP

0 < 3.29.0

References

NVD ↗ CVE.org ↗ EPSS Data ↗

github.com: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-cj9v-h4hq-29jr vulncheck.com: https://www.vulncheck.com/advisories/freerdp-windows-client-before-heap-buffer-overflow-via-cliprdr

Credits

🔍 hyperlyz