Integer Overflow Vulnerability in FreeRDP Audio Input Redirection Channel
CVE-2026-68580

7.7HIGH

Key Information:

Vendor

Freerdp

Status
Freerdp
Vendor
CVE Published:
2 August 2026

What is CVE-2026-68580?

The vulnerability present in FreeRDP versions prior to 3.29.0 involves integer overflow issues within the audio input redirection channel. It specifically affects backends like ALSA, sndio, WinMM, and OpenSL ES due to improper validation of the FramesPerPacket parameter received from RDP servers. Attackers can exploit this flaw by providing a malicious FramesPerPacket value, potentially leading to heap-based buffer overflows on ALSA and resulting in denial of service across all platforms.

Affected Version(s)

FreeRDP 0 < 3.29.0

FreeRDP 3.29.0

References

https://github.com/FreeRDP/FreeRDP/security/advisories/GH...
vendor-advisory
https://www.vulncheck.com/advisories/freerdp-before-integ...
third-party-advisory

CVSS V4

Score:
7.7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

canomer
.