Unrated severityNVD Advisory· Published Aug 2, 2026
Debian freerdp3: FreeRDP before 3.29.0 fails to enforce the RESPONSE_SIZE_LIMIT when processing T…
CVE-2026-67297
Description
FreeRDP before 3.29.0 fails to enforce the RESPONSE_SIZE_LIMIT when processing Transfer-Encoding: chunked HTTP responses in http_response_recv_body(). Attackers controlling a malicious RD Gateway endpoint can send oversized chunked response bodies to exhaust client memory resources without triggering the configured size limit.
Affected products
2Patches
Vulnerability mechanics
News mentions
0No linked articles in our index yet.