PT-2026-67332 · Freerdp · Freerdp

Davidkorczynski · CVE-2026-68579 · Published 2026-08-02 · Updated 2026-08-02

Positive Technologies (AI Summary)

CVSS v3.1

9.6

Critical

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:H

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 3.30.0

Description A heap-based buffer overflow exists in the Windows clipboard client's CliprdrStream Read() function. The issue occurs when an OLE paste consumer calls IStream::Read with a fixed-size buffer of cb bytes; the CliprdrStream Read() function then copies the response from the RDP server using the server-supplied length req fsize instead of the cb value. A compromised RDP server can send an oversized CB FILECONTENTS RESPONSE, leading to an out-of-bounds write of attacker-controlled data into the paste consumer's heap buffer during a clipboard paste operation.

Recommendations Update to version 3.30.0 or later.

Exploit

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2026-68579

GHSA-M37J-JCR2-8GCC

Affected Products

Freerdp

References · 6

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/68xxx/CVE-2026-68579.json · Exploit
• https://github.com/FreeRDP/FreeRDP/commit/5e8e987b469b60a3bafadf8f5afc40f91c09f458 · Patch
• https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-m37j-jcr2-8gcc · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-68579 · Security Note
• https://osv.dev/vulnerability/CVE-2026-68579 · Vendor Advisory
• https://vulncheck.com/advisories/freerdp-before-heap-overflow-via-cliprdrstream-read · Note