CyberRota Analysis
AI-GeneratedFreeRDP versions prior to 3.29.0 are vulnerable to memory exhaustion due to improper enforcement of the RESPONSE_SIZE_LIMIT when handling chunked HTTP responses. This flaw allows attackers with control over a malicious RD Gateway endpoint to send oversized responses, potentially leading to denial of service on client systems. Organizations using FreeRDP should prioritize patching this vulnerability to mitigate the risk of resource exhaustion attacks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
FreeRDP before 3.29.0 fails to enforce the RESPONSE_SIZE_LIMIT when processing Transfer-Encoding: chunked HTTP responses in http_response_recv_body(). Attackers controlling a malicious RD Gateway endpoint can send oversized chunked response bodies to exhaust client memory resources without triggering the configured size limit.