Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
FreeRDP before 3.29.0 contains integer overflow vulnerabilities in the audio input redirection channel (audin) across ALSA, sndio, WinMM, and OpenSL ES backends that fail to validate the FramesPerPacket parameter from RDP servers. Attackers can supply a malicious FramesPerPacket value causing allocation size wraparound, resulting in heap-based buffer overflow on ALSA or denial of service on all platforms.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-08-02 | 2 | Disclosure2 |
| 2026-08-03 | 1 | Patch1 |
CVE-2026-68580 FreeRDP before 3.29.0 contains integer overflow vulnerabilities in the audio input redirection channel (audin) across ALSA, sndio, WinMM, and OpenSL ES backends that … https://www.cve.org/CVERecord?id=CVE-2026-68580
Post summary
The post announces an integer overflow flaw in FreeRDP’s audio input redirection channel across several audio backends, but offers no exploit, PoC, or mitigation information.
CVE-2026-68580 - Heap buffer overflow in FreeRDP via audin integer overflow. Malicious RDP server can trigger RCE or DoS. CVSS 7.5. Unpatched - update immediately when available. #CVE #FreeRDP #infosec #devsecops #devops #developer #sysadmin #100daysofcode #git #github #gitlab #redteam #blueteam #ethicalhacker #ethicalhacking #cybersecurityawareness #cybersecurity #cybersecuritynews #cybersecuritytips #python #hacker #linux #kali #ubuntu https://www.valtersit.com/cve/CVE-2026-68580/
Post summary
A heap buffer overflow in FreeRDP can enable remote code execution; the vulnerability is unpatched and requires immediate update when available.
CVE-2026-68580 Integer Overflow in FreeRDP Audio Input Redirection Channel Before 3.29.0 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-68580
Post summary
The text announces a newly disclosed integer overflow vulnerability in FreeRDP’s audio input redirection pre‑3.29.0, with no evidence of PoC, exploit code, active exploitation, or patch.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | freerdp | freerdp | - | - | - |