CVE-2026-91962 in FreeRDP
الملخص
بحسب MITRE • 15/09/2026
FreeRDP before 3.31.0 contains an integer overflow in the audin Apple backends when processing FramesPerPacket values from MSG_SNDIN_OPEN messages. Attackers can supply crafted FramesPerPacket values that cause AudioQueueAllocateBuffer size computation to wrap, resulting in undersized buffer allocation and potential out-of-bounds access.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.