PT-2026-67333 · Freerdp+1 · Freerdp+1
CVSS v4.0
7.7
High
| Vector | AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N |
Name of the Vulnerable Software and Affected Versions
FreeRDP versions prior to 3.29.0
Description
Integer overflow issues exist in the audio input redirection channel (audin) across ALSA, sndio, WinMM, and OpenSL ES backends. The software fails to validate the
FramesPerPacket parameter received from RDP servers. A malicious value for FramesPerPacket can cause an allocation size wraparound, leading to a heap-based buffer overflow on ALSA or a denial of service across all supported platforms.Recommendations
Update to version 3.29.0 or later.
Exploit
Fix
DoS
Heap Based Buffer Overflow
Integer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Freerdp
Rocky Linux