Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 20:01:34 +0000 CVE-2026-67297 — FreeRDP before 3.29.0 Resource Exhaustion via chunked HTTP response https://cve.radiocsirt.org/vuln/cve-2026-67297 <p><strong>Affected:</strong> FreeRDP</p> <p>FreeRDP before 3.29.0 fails to enforce the RESPONSE_SIZE_LIMIT when processing Transfer-Encoding: chunked HTTP responses in http_response_recv_body(). Attackers controlling a malicious RD Gateway endpoint can send oversized chunked response bodies to exhaust client memory resources without triggering the configured size limit.</p> <p><strong>Affected:</strong> FreeRDP</p> <p>FreeRDP before 3.29.0 fails to enforce the RESPONSE_SIZE_LIMIT when processing Transfer-Encoding: chunked HTTP responses in http_response_recv_body(). Attackers controlling a malicious RD Gateway endpoint can send oversized chunked response bodies to exhaust client memory resources without triggering the configured size limit.</p> https://cve.radiocsirt.org/vuln/cve-2026-67297