Skip to content
VulniPulse
Sign in
Highest advisory severityHigh 1 vendor · 1 advisory

CVE-2026-68580

CVE-2026-68580: 1 tracked advisory record across Red Hat. Compare vendor sources and published fix guidance.

Compare the source-linked records below. Ratings and product/version details belong to each advisory; they are not a single CVE-wide score or proof that every listed product is affected. How VulniPulse collects and checks evidence.

NVD detail CVE.org

Vendor advisory comparison

Red Hat

1 advisory
  • Advisory severityHigh7.5

    High [CVE-2026-68580] Remote code execution or denial of service via audio input integer overflow

    CVE-2026-68580Source published Source updated

    FreeRDP before 3.29.0 contains integer overflow vulnerabilities in the audio input redirection channel (audin) across ALSA, sndio, WinMM, and OpenSL ES backends that fail to validate the FramesPerPacket parameter from RDP servers. Attackers can supply a malicious FramesPerPacket value causing allocation size wraparound, resulting in heap-based buffer overflow on ALSA or denial of service on all platforms. A flaw was found in FreeRDP, an open-source implementation of the Remote Desktop Protocol (RDP). This can lead to a heap-based buffer overflow, potentially enabling arbitrary code execution on systems using the ALSA backend, or a denial of service across all supported platforms. The vulnerability arises from an integer overflow in the audio input redirection channel (audin) when…

    Affected products in this advisory
    • Red Hat Enterprise Linux 10.0 Extended Update Support
    • Red Hat Enterprise Linux 7 Extended Lifecycle Support
    • Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
    • Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On

    9 more entries in the full advisory.

    Source-reported affected versions
    • < 3.29.0
    Source-reported fixed versions
    • freerdp-2:3.10.3-12.el10_2.8
    • freerdp-2:3.10.3-3.el10_0.11
    • freerdp-0:2.1.1-5.el7_9.11
    • freerdp-2:2.11.7-11.el8_10

    18 more entries in the full advisory.

    Mitigation guidance
    • To mitigate this issue, disable the audio input redirection channel when using FreeRDP clients. This can be achieved by using the `/audin:no` command-line option when launching `xfreerdp` or other FreeRDP-based clients. Disabling audio input redirection may impact functionality that relies on microphone input during the RDP session. Ensure to restart any active FreeRDP sessions for the change to take effect.
    Full advisory and evidenceOpen source bulletin

Android app · Google Play

Monitor future Red Hat CVEs from your phone.

Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.

Matching phone alertsOptional email delivery
Get CVE alertsSee app features