Security Advisory

CVE-2026-67297

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-08-01 12:22:16

Last updated 2026-08-01 12:22:16

Assigner VulnCheck

CVSS score not scored

State PUBLISHED

Description

FreeRDP before 3.29.0 fails to enforce the RESPONSE_SIZE_LIMIT when processing Transfer-Encoding: chunked HTTP responses in http_response_recv_body(). Attackers controlling a malicious RD Gateway endpoint can send oversized chunked response bodies to exhaust client memory resources without triggering the configured size limit.

← Browse all CVEs View on cve.org ↗