FreeRDP versions 3.30.0 through 3.31.x contain a heap out-of-bounds read (CWE-125) in the Windows client’s CliprdrStream_New function. The flaw allows an attacker who controls an RDP server to send a FILECONTENTS_SIZE request with a cbRequested value that is fewer than eight bytes when a user pastes a remote file. The client then reads memory beyond the allocated buffer, potentially causing a crash or corrupting the clipboard stream size.

The vulnerability affects the FreeRDP client software prior to version 3.32.0. Users running any FreeRDP release from 3.30.0 through 3.31.x on Windows platforms are exposed if remote clipboard operations are enabled during an RDP session.

The flaw has a low CVSS score of 2.3 and an EPSS score of less than 1%, indicating a very low likelihood of widespread exploitation. It is not listed in the CISA KEV catalog. Exploitation requires an attacker to control a remote RDP server and encourage a clipboard paste action from the client; the resulting heap over‑read can crash the client or corrupt the stream but does not provide code execution or data exfiltration. Because the attack vector is a remote RDP server and depends on user interaction, the risk to the broader environment remains low at this time, though a client crash can impact availability and user experience.