Boletines de Vulnerabilidades

CVE-2026-91962

   
Software afectado APPLE
 
FreeRDP before 3.31.0 contains an integer overflow in the audin Apple backends when processing FramesPerPacket values from MSG_SNDIN_OPEN messages. Attackers can supply crafted FramesPerPacket values that cause AudioQueueAllocateBuffer size computation to wrap, resulting in undersized buffer allocation and potential out-of-bounds access.

Link:

https://nvd.nist.gov/vuln/detail/CVE-2026-91962