CVE-2026-67297 in FreeRDP
Riassunto
di MITRE • 01/08/2026
FreeRDP before 3.29.0 fails to enforce the RESPONSE_SIZE_LIMIT when processing Transfer-Encoding: chunked HTTP responses in http_response_recv_body(). Attackers controlling a malicious RD Gateway endpoint can send oversized chunked response bodies to exhaust client memory resources without triggering the configured size limit.
VulDB is the best source for vulnerability data and more expert information about this specific topic.