CVE-2026-67306

CVE-2026-67306 describes an out-of-bounds read in FreeRDP up to version 3.28.0 when decoding planar RLE bitmaps in libfreerdp/codec/planar.c (planar_decompress_plane_rle and planar_decompress_plane_rle_only). The 1-byte control byte is checked, but the following 0–15 attacker-declared raw bytes a...

EUVD-2026-51856

FreeRDP before 3.29.0 fails to enforce the RESPONSESIZELIMIT when processing Transfer-Encoding: chunked HTTP responses in httpresponserecvbody. Attackers controlling a malicious RD Gateway endpoint can send oversized chunked response bodies to exhaust client memory resources without triggering th...

PT-2024-32384 · Alist +1 · Alist +1

Name of the Vulnerable Software and Affected Versions: AList versions prior to 3.29.0 Description: AList, a file list program supporting multiple storages, contains a reflected cross-site scripting issue in the helper.go file. The endpoint "/i/:link name" takes a user-provided value and reflects ...