CVE-2026-64620 | FreeRDP up to 3.27.9 Buffer out_length heap-based overflow

A vulnerability identified as critical has been detected in FreeRDP up to 3.27.9. Affected is an unknown function of the component Buffer. This manipulation of the argument out_length causes heap-based buffer overflow.

The identification of this vulnerability is CVE-2026-64620. It is possible to initiate the attack remotely. There is no exploit available.