THREATOPS
THREAT OPS › Threat News › [NVD] CVE-2026-67297 (HIGH 7.5) — FreeRDP before 3.29.0 fails to enforce the RESPONSE_SIZE_LIMIT when processing Transfer-Encoding: chunked HTTP responses in http_response_recv_body(). Attackers controlling a malicious RD Gateway endpoint can send oversized chunked response bodies to exhaust client memory resourc

[NVD] CVE-2026-67297 (HIGH 7.5) — FreeRDP before 3.29.0 fails to enforce the RESPONSE_SIZE_LIMIT when processing Transfer-Encoding: chunked HTTP responses in http_response_recv_body(). Attackers controlling a malicious RD Gateway endpoint can send oversized chunked response bodies to exhaust client memory resourc

mednvdPublished 2026-08-01

CVE-2026-67297 CVSS: 7.5 HIGH Published: 2026-08-01T13:16:58.967

FreeRDP before 3.29.0 fails to enforce the RESPONSE_SIZE_LIMIT when processing Transfer-Encoding: chunked HTTP responses in http_response_recv_body(). Attackers controlling a malicious RD Gateway endpoint can send oversized chunked response bodies to exhaust client memory resources without triggering the configured size limit.

Indicators of compromise

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-67297