CVE-2026-44420: FreeRDP cliprdr server heap-buffer-overflow via undersized capabilitySetLength in CB_CLIP_CAPS
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.26.0, a malicious RDP client can trigger a heap-buffer-overflow write in FreeRDP's server-side clipboard (cliprdr) channel by sending a CBCLIPCAPS PDU with a too-small capabilitySetLength. This can crash the server process (remote DoS) and may be exploitable for code execution because it corrupts heap memory. This vulnerability is fixed in 3.26.0.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
FreeRDPto a version that resolves this vulnerability.Fixed in 3.26.0
Event History
Frequently Asked Questions
What is the severity of CVE-2026-44420?
CVE-2026-44420 has a high severity rating of 8.8.
How do I fix CVE-2026-44420?
To mitigate CVE-2026-44420, upgrade FreeRDP to version 3.26.0 or later.
What type of vulnerability is CVE-2026-44420?
CVE-2026-44420 is a heap-buffer-overflow vulnerability in the FreeRDP cliprdr server.
Who is affected by CVE-2026-44420?
CVE-2026-44420 affects users utilizing FreeRDP versions prior to 3.26.0.
What can happen if CVE-2026-44420 is exploited?
Exploitation of CVE-2026-44420 can lead to a crash of the server process.