CVE-2026-121397

FreeRDP before 3.32.2 contains a heap buffer over-read vulnerability in savepngtobuffer that allows malicious RDP servers to leak client memory by sending 16 bpp DIB clipboard data. Attackers can offer a CFDIB BIBITFIELDS image that, when converted to PNG for a local application, embeds client he...