CVE-2026-111376 FreeRDP 3.30.0 before 3.32.0 Heap Over-Read via Windows cliprdr FILECONTENTS_SIZE

FreeRDP from 3.30.0 before 3.32.0 contains a heap out-of-bounds read vulnerability in the Windows client's CliprdrStreamNew that allows malicious RDP servers to trigger invalid memory reads via short clipboard responses. Attackers can answer a FILECONTENTSSIZE request with a cbRequested of fewer...

CVE-2026-111376

The FreeRDP software (versions 3.30.0 before 3.32.0 ) is vulnerable to a heap out-of-bounds read in the Windows client's CliprdrStream_New component. A malicious RDP server can trigger invalid memory reads by providing a short clipboard response—specifically, answering a FILECONTENTS_SIZE request...