CVE-2026-68580

A flaw was found in FreeRDP, an open-source implementation of the Remote Desktop Protocol (RDP). This vulnerability, an integer overflow in the audio input redirection channel, allows a remote attacker to supply a malicious FramesPerPacket value. This can lead to a heap-based buffer overflow, potentially enabling arbitrary code execution on systems using the ALSA backend, or a denial of service across all supported platforms.

This is a flaw in FreeRDP that could lead to remote code execution or denial of service on client systems. The vulnerability arises from an integer overflow in the audio input redirection channel (audin) when connecting to a malicious RDP server, which can cause a heap-based buffer overflow, particularly affecting Linux systems using the ALSA backend. Exploitation requires user interaction to connect to a compromised server.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, disable the audio input redirection channel when using FreeRDP clients. This can be achieved by using the /audin:no command-line option when launching xfreerdp or other FreeRDP-based clients. Disabling audio input redirection may impact functionality that relies on microphone input during the RDP session. Ensure to restart any active FreeRDP sessions for the change to take effect.