CVE-2026-68580: FreeRDP before 3.29.0 Integer Overflow via Audio Input Channel
FreeRDP before 3.29.0 contains integer overflow vulnerabilities in the audio input redirection channel (audin) across ALSA, sndio, WinMM, and OpenSL ES backends that fail to validate the FramesPerPacket parameter from RDP servers. Attackers can supply a malicious FramesPerPacket value causing allocation size wraparound, resulting in heap-based buffer overflow on ALSA or denial of service on all platforms.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-68580?
CVE-2026-68580 has a high severity rating of 7.5.
How do I fix CVE-2026-68580?
To fix CVE-2026-68580, update FreeRDP to version 3.29.0 or later.
What are the potential impacts of CVE-2026-68580?
CVE-2026-68580 can lead to integer overflow, which may allow remote attackers to execute arbitrary code.
Which versions of FreeRDP are affected by CVE-2026-68580?
FreeRDP versions prior to 3.29.0 are affected by CVE-2026-68580.
What components are involved in the CVE-2026-68580 vulnerability?
CVE-2026-68580 involves integer overflow vulnerabilities in the audio input redirection channel across multiple backends including ALSA, sndio, WinMM, and OpenSL ES.