CyberRota Analysis
AI-GeneratedFreeRDP versions prior to 3.29.0 are vulnerable due to integer overflow issues in the audio input redirection channel, specifically related to the FramesPerPacket parameter from RDP servers. This flaw can lead to heap-based buffer overflows on ALSA or cause denial of service across all supported platforms. Organizations using FreeRDP for remote desktop solutions should prioritize patching to mitigate potential exploitation risks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
FreeRDP before 3.29.0 contains integer overflow vulnerabilities in the audio input redirection channel (audin) across ALSA, sndio, WinMM, and OpenSL ES backends that fail to validate the FramesPerPacket parameter from RDP servers. Attackers can supply a malicious FramesPerPacket value causing allocation size wraparound, resulting in heap-based buffer overflow on ALSA or denial of service on all platforms.