CVE-2026-68579
Received Received - Intake

Heap-based Buffer Overflow in FreeRDP

Publication date: 2026-08-02

Last updated on: 2026-08-02

Assigner: VulnCheck

Description
FreeRDP before 3.30.0 (<= 3.29.0) contains a heap-based buffer overflow in the Windows clipboard client's CliprdrStream_Read function (client/Windows/wf_cliprdr.c). When an OLE paste consumer (e.g. explorer.exe) calls IStream::Read with a fixed-size buffer of cb bytes, CliprdrStream_Read requests file contents from the RDP server and then copies the response into the caller's buffer using the server-supplied length (req_fsize) instead of cb. A malicious or compromised RDP server can return an oversized CB_FILECONTENTS_RESPONSE, causing an out-of-bounds write of attacker-controlled data into the paste consumer's heap buffer when a user pastes server-offered clipboard file contents.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-02
Last Modified
2026-08-02
Generated
2026-08-02
AI Q&A
2026-08-02
EPSS Evaluated
N/A
NVD
CVE-2026-68579
EUVD
EUVD-2026-51989

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
freerdp freerdp to 3.30.0 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-787 The product writes data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

FreeRDP before version 3.30.0 has a heap-based buffer overflow in the Windows clipboard client's CliprdrStream_Read function. When a user pastes file contents from an RDP server, the client copies server-supplied data into a fixed-size buffer without proper size validation, allowing a malicious server to write beyond the buffer and execute arbitrary code.

Impact Analysis

If you connect to a malicious or compromised RDP server, an attacker could exploit this flaw to execute arbitrary code on your system with the privileges of the user running FreeRDP. This could lead to data theft, system compromise, or further network infiltration.

Mitigation Strategies

Upgrade FreeRDP to version 3.30.0 or later to address the heap-based buffer overflow in the Windows clipboard client. Avoid connecting to untrusted RDP servers to prevent malicious clipboard content from triggering the vulnerability.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-68579. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart