CVE-2026-111376

Name of the Vulnerable Software and Affected Versions FreeRDP versions 3.30.0 through 3.31.x

Description A heap out-of-bounds read occurs in the Windows client's CliprdrStream New() function. This happens when a malicious RDP server sends a short clipboard response to a FILECONTENTS SIZE request by providing a cbRequested value of fewer than eight bytes during a remote file paste operation. This can lead to invalid memory reads, resulting in a client crash or corruption of the stream size.

Recommendations Update FreeRDP to version 3.32.0.