Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2026-111380

FreeRDP from 3.29.0 before 3.32.0 contains an integer overflow in the Apple audin backends (audin_mac.m, audin_ios.m), which compute the audio queue buffer size as FramesPerPacket * 2 * nChannels in UINT32 arithmetic, bypassing the CVE-2026-91962 fix. A malicious RDP server can send FramesPerPacket of 2^30 in the audin Open PDU to wrap the multiplication, causing undersized AudioQueueAllocateBuffer allocations and a heap out-of-bounds write in macOS and iOS clients.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 16.3%
CVSS Severity
CVSS v3 Score 8.8
Products affected by CVE-2026-111380
  • Freerdp » Freerdp » Version: 3.29.0
    cpe:2.3:a:freerdp:freerdp:3.29.0
  • Freerdp » Freerdp » Version: 3.30.0
    cpe:2.3:a:freerdp:freerdp:3.30.0
  • Freerdp » Freerdp » Version: 3.31.0
    cpe:2.3:a:freerdp:freerdp:3.31.0
  • Freerdp » Freerdp » Version: 3.31.1
    cpe:2.3:a:freerdp:freerdp:3.31.1


Products
Pricing
Contact Us

Shodan ® - All rights reserved