Copyright © 2012 Red Hat, Inc. All rights reserved. Important 2026-08-01T12:22:16 FreeRDP: FreeRDP Windows Client: Remote Code Execution via Heap Buffer Overflow in Clipboard Processing 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H CWE-122

FreeRDP Windows client before 3.29.0 contains a heap buffer overflow vulnerability in the clipboard virtual channel when processing CLIPRDR_FILE_CONTENTS_RESPONSE PDUs without validating the server-provided size against the destination buffer. A malicious RDP server can send a response with a data payload significantly larger than requested, causing arbitrary heap memory corruption that may enable remote code execution when a user performs a paste operation.

The FreeRDP Windows client contains a heap buffer overflow vulnerability. If a user pastes maliciously crafted, oversized clipboard data from an untrusted RDP server, it triggers memory corruption that may result in remote code execution.

Red Hat products are not impacted by this vulnerability. The affected codebase (wfreerdp / wf_cliprdr.c) is exclusive to the Windows client, whereas Red Hat Enterprise Linux (RHEL) strictly utilizes and builds Linux clients for FreeRDP. Red Hat Enterprise Linux 10 Not affected freerdp Red Hat Enterprise Linux 6 Not affected freerdp Red Hat Enterprise Linux 7 Not affected freerdp Red Hat Enterprise Linux 8 Not affected freerdp Red Hat Enterprise Linux 9 Not affected freerdp https://www.cve.org/CVERecord?id=CVE-2026-67305 https://nvd.nist.gov/vuln/detail/CVE-2026-67305 https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-cj9v-h4hq-29jr https://www.vulncheck.com/advisories/freerdp-windows-client-before-heap-buffer-overflow-via-cliprdr