FreeRDP is affected by a heap-based buffer overflow vulnerability in its audio input channel processing, which may result in remote code execution.

This is a CWE-122 heap-based buffer overflow vulnerability. The flaw is triggered via the audio input channel, and while it requires user interaction, it does not require prior authentication to target the service.

The vulnerability carries a CVSS score of 7.5, reflecting its potential for severe impact. Successful exploitation could allow an attacker to execute arbitrary code with the privileges of the FreeRDP process, leading to a complete compromise of the client or server system running the affected software.

Immediate Action: Upgrade all instances of FreeRDP to version 3.29.0 or later to apply the necessary memory safety fixes.

Proactive Monitoring: Review system logs for unexpected crashes of the RDP service, which could indicate an attempted heap overflow exploit.

Compensating Controls: Utilize a Web Application Firewall or network intrusion detection system to monitor and block malformed RDP traffic patterns if immediate patching is not possible.

Public Exploit Available: Unknown

Due to the remote code execution potential of this buffer overflow, all users of FreeRDP must update to version 3.29.0 immediately. Ensuring that all client and server software is running the latest patched version is critical to preventing unauthorized remote access.