A critical heap buffer overflow in RustDesk for Windows allows an attacker to achieve remote code execution through malicious clipboard redirection.

The vulnerability stems from improper validation of clipboard data lengths in the Windows clipboard redirection module. An unauthenticated remote peer can send an oversized response, causing a heap buffer overflow during the paste operation, which may lead to memory corruption or code execution.

This vulnerability allows for full system compromise if a user interacts with a malicious peer and performs a paste operation. With a CVSS score of 9.6, the risk of remote code execution is severe, potentially allowing attackers to gain persistent access to enterprise workstations and internal networks.

Immediate Action: Upgrade RustDesk to the latest available version which addresses the heap buffer overflow in the clipboard redirection logic.

Proactive Monitoring: Monitor endpoint security logs for unexpected process execution or crashes associated with the RustDesk service.

Compensating Controls: Disable clipboard redirection features in RustDesk configurations if the functionality is not strictly required for business operations.

Public Exploit Available: Unknown

The severity of this flaw necessitates immediate attention. Users should update their RustDesk installations immediately, and security teams should restrict access to remote desktop tools to trusted peers only until patching is completed.