CVE-2026-110837

The software FreeRDP 2.0.0 before 3.32.0 contains a heap-based buffer overflow in the freerdp_dsp_decode_mp3 function. This vulnerability specifically affects versions built with WITH_LAME=ON and WITH_DSP_FFMPEG=OFF. The root cause is that the right-channel PCM pointer is offset by a byte count t...