CyberRota Analysis
AI-GeneratedFreeRDP versions prior to 3.31.0 are vulnerable due to an integer overflow in the audin Apple backends, which occurs when processing malicious FramesPerPacket values in MSG_SNDIN_OPEN messages. This vulnerability can lead to undersized buffer allocation, potentially resulting in out-of-bounds access that could be exploited by attackers. Organizations using FreeRDP, particularly those with audio streaming capabilities, should prioritize patching to mitigate the risk of exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
FreeRDP before 3.31.0 contains an integer overflow in the audin Apple backends when processing FramesPerPacket values from MSG_SNDIN_OPEN messages. Attackers can supply crafted FramesPerPacket values that cause AudioQueueAllocateBuffer size computation to wrap, resulting in undersized buffer allocation and potential out-of-bounds access.