CVE-2026-67297 in FreeRDP
요약
\~에 의해 MITRE • 2026. 08. 01.
FreeRDP before 3.29.0 fails to enforce the RESPONSE_SIZE_LIMIT when processing Transfer-Encoding: chunked HTTP responses in http_response_recv_body(). Attackers controlling a malicious RD Gateway endpoint can send oversized chunked response bodies to exhaust client memory resources without triggering the configured size limit.
VulDB is the best source for vulnerability data and more expert information about this specific topic.