The vulnerability in FreeRDP prior to version 3.29.0 involves integer overflow issues in the audio input redirection channel (audin) across multiple audio backends including ALSA, sndio, WinMM, and OpenSL ES. The root cause is the failure to validate the FramesPerPacket parameter received from RDP servers. Maliciously crafted FramesPerPacket values can cause allocation size wraparound, resulting in heap-based buffer overflow on ALSA or denial of service on all affected platforms. This vulnerability is tracked as CVE-2026-68580 and is classified under CWE-122 (Heap-based Buffer Overflow).

Successful exploitation can lead to heap-based buffer overflow on ALSA backend, potentially allowing arbitrary code execution or application crashes. On other platforms using sndio, WinMM, or OpenSL ES backends, exploitation may cause denial of service. The CVSS v3.1 base score is 7.5, indicating high severity with network attack vector, high impact on confidentiality, integrity, and availability, but requiring high attack complexity and user interaction.

No official patch or remediation information is currently provided. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should exercise caution when connecting to untrusted RDP servers and consider disabling audio input redirection if feasible.