Live › vulnerability › CVE-2026-111376
Go to dashboardFreeRDP's Windows client reads past a heap buffer when a malicious RDP server sends a short clipboard response during a remote file paste. The result is a client crash or a corrupted stream size, and the sources do not describe code execution.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Teams whose staff connect to remote servers with the FreeRDP Windows client at version 3.30.0 to 3.31.x. Exposure depends on a user pasting a file from the remote session, so the risk falls on client machines that connect to servers you do not control. Servers you run yourself and clients on other platforms are outside what the sources describe.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| freerdp | vendor | >= 3.30.0, < 3.32.0 | 3.32.0 |
xfreerdp /version or check the installed FreeRDP version; affected range is 3.30.0 up to but not including 3.32.03.32.0 or laterEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
FreeRDP from 3.30.0 before 3.32.0 contains a heap out-of-bounds read vulnerability in the Windows client's CliprdrStream_New that allows malicious RDP servers to trigger invalid memory reads via short clipboard responses. Attackers can answer a FILECONTENTS_SIZE request with a cbRequested of fewer than eight bytes when a user pastes a remote file, crashing the client or corrupting the stream size.
This page as .md · .json · in your agent: get_signal("CVE-2026-111376")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.