CVE-2026-91962 in FreeRDP
요약
\~에 의해 MITRE • 2026. 09. 15.
FreeRDP before 3.31.0 contains an integer overflow in the audin Apple backends when processing FramesPerPacket values from MSG_SNDIN_OPEN messages. Attackers can supply crafted FramesPerPacket values that cause AudioQueueAllocateBuffer size computation to wrap, resulting in undersized buffer allocation and potential out-of-bounds access.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.