CVE-2026-111380

A flaw was found in FreeRDP. When handling audio input on Apple platforms, an integer overflow occurs during buffer size calculations. A malicious Remote Desktop Protocol (RDP) server can exploit this by sending a specially crafted packet during session setup, causing an undersized memory allocation. This flaw can lead to a heap-based buffer overflow, potentially allowing the server to execute arbitrary code or trigger a denial of service on the client system.

This flaw is rated Important because a malicious RDP server can trigger an integer overflow in FreeRDP Apple audio-input (audin) backends, leading to a heap out-of-bounds write after the user connects (UI:R), with high confidentiality, integrity, and availability impact. This flaw does not affect Red Hat products.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.