THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-67305 — FreeRDP Windows client before 3.29.0 contains a heap buffer overflow vulnerability in the clipboard virtual channel when processing CLIPRDR_FILE_CONTENTS_RESPONSE PDUs without validating the server-provided size against the destination buffer. A malicious RDP server can send a re

[NVD] CVE-2026-67305 — FreeRDP Windows client before 3.29.0 contains a heap buffer overflow vulnerability in the clipboard virtual channel when processing CLIPRDR_FILE_CONTENTS_RESPONSE PDUs without validating the server-provided size against the destination buffer. A malicious RDP server can send a re

mednvdPublished 2026-08-01

CVE-2026-67305 CVSS: None Published: 2026-08-01T13:17:00.113

FreeRDP Windows client before 3.29.0 contains a heap buffer overflow vulnerability in the clipboard virtual channel when processing CLIPRDR_FILE_CONTENTS_RESPONSE PDUs without validating the server-provided size against the destination buffer. A malicious RDP server can send a response with a data payload significantly larger than requ

Indicators of compromise

CVE-2026-67305cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-67305