high8.8
CVE-2026-109676
FreeRDP from 3.0.0-beta1 before 3.32.0 contains a use-after-free vulnerability in smartcard handling that allows attackers to access a freed smartcard handle o…
Impact
FreeRDP from 3.0.0-beta1 before 3.32.0 contains a use-after-free vulnerability in smartcard handling that allows attackers to access a freed smartcard handle object after an invalid connect operation. Attackers can trigger an invalid smartcard connect operation to cause reuse of the freed handle, leading to memory corruption or crashes.
Affected products
| Product | Affected versions |
|---|---|
| FreeRDP From 3.0.0-Beta1 | before 3.32.0 |
Versions were read from the advisory text. No structured product data has been published for this record yet.