CVE-2026-68580 FreeRDP before 3.29.0 Integer Overflow via Audio Input Channel
Attackers can trigger heap buffer overflows or denial of service in FreeRDP clients by sending malicious audio channel data.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2026-68580?
CVE-2026-68580 is a high-severity vulnerability in Freerdp Freerdp, published on 2 Aug 2026. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
FreeRDP before 3.29.0 contains integer overflow vulnerabilities in the audio input redirection channel (audin) across ALSA, sndio, WinMM, and OpenSL ES backends that fail to validate the FramesPerPacket parameter from RDP servers. Attackers can supply a malicious FramesPerPacket value causing allocation size wraparound, resulting in heap-based buffer overflow on ALSA or denial of service on all platforms.
Weakness: CWE-122
Which versions are affected by CVE-2026-68580?
It affects 1 product.
Products include Freerdp Freerdp.
How do I fix CVE-2026-68580?
Upgrade to a fixed version.
Is CVE-2026-68580 being exploited?
There is no known exploitation of CVE-2026-68580 in the wild and no public exploit code.
Other vulnerabilities in Freerdp Freerdp
- CVE-2021-37594 Other in n/a
- CVE-2021-37595 Other in n/a
- CVE-2026-67305 FreeRDP Windows Client before 3.29.0 Heap Buffer Overflow via Cliprdr
- CVE-2026-66402 FreeRDP before 3.29.0 TLS Certificate Identity Validation Bypass
- CVE-2026-67289 FreeRDP before 3.29.0 HTTP Proxy Request Injection via Redirection
Sources
Also known as DEBIAN-CVE-2026-68580, GHSA-69xf-pqrw-596x, GHSA-mj63-24h6-p8wq, UBUNTU-CVE-2026-68580.