CVE-2026-68580CWE-122

CVE-2026-68580

High · published August 2, 2026

CVSS v3.1
7.5
EPSS
0%
Percentile
21.4
In the wild
Unconfirmed
What it is

FreeRDP before 3.29.0 contains integer overflow vulnerabilities in the audio input redirection channel (audin) across ALSA, sndio, WinMM, and OpenSL ES backends that fail to validate the FramesPerPacket parameter from RDP servers. Attackers can supply a malicious FramesPerPacket value causing allocation size wraparound, resulting in heap-based buffer overflow on ALSA or denial of service on all platforms.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00299 · 21.4th percentile
Weakness
CWE-122 · Heap-based Buffer Overflow
Published
2026-08-02T17:16Z
Affected products (1)
ProductVersionsFixed in
freerdp/freerdp< 3.29.03.29.0
References (2)
https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-69xf-pqrw-596x · [email protected]https://www.vulncheck.com/advisories/freerdp-before-integer-overflow-via-audio-input-channel · [email protected]
EPSS history
Timeline
  • 02 AUG 12:15Z
    FreeRDP before 3.29.0 Integer Overflow via Audio Input Channel
    cvelistv5