Integer Overflow Vulnerability in FreeRDP's Apple Audio Backends

CVE-2026-111380

What is CVE-2026-111380?

The vulnerability in FreeRDP affects audio processing in Apple backends, leading to an integer overflow when calculating audio queue buffer size. Specifically, the parameters used in the multiplication can exceed the UINT32 limits, enabling a malicious RDP server to send crafted data that triggers heap out-of-bounds writes. This flaw can allow attackers to manipulate the audio buffer allocation, potentially compromising the stability and security of macOS and iOS clients running vulnerable versions of FreeRDP.

References