CVE-2026-68579

A flaw was found in FreeRDP. A heap-based buffer overflow exists in the Windows clipboard client's CliprdrStream_Read function. A malicious or compromised Remote Desktop Protocol (RDP) server can send an oversized clipboard file contents response. When a user pastes this content, it causes an out-of-bounds write into the paste consumer's memory, potentially leading to arbitrary code execution or a denial of service.

This is a Windows specific vulnerability and does not affect Red Hat products.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.