CyberRota Analysis
AI-GeneratedThe FreeRDP Windows client prior to version 3.29.0 is vulnerable to a heap buffer overflow in the clipboard virtual channel, which occurs when processing oversized data payloads from a malicious RDP server. This flaw can lead to arbitrary heap memory corruption, potentially allowing remote code execution during paste operations. Organizations using affected versions of FreeRDP should prioritize patching to mitigate the risk of exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
FreeRDP Windows client before 3.29.0 contains a heap buffer overflow vulnerability in the clipboard virtual channel when processing CLIPRDR_FILE_CONTENTS_RESPONSE PDUs without validating the server-provided size against the destination buffer. A malicious RDP server can send a response with a data payload significantly larger than requested, causing arbitrary heap memory corruption that may enable remote code execution when a user performs a paste operation.