PT-2026-110667 · Freerdp+1 · Freerdp
CVSS v4.0
7.0
High
| Vector | AV:P/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N |
FreeRDP 3.0.0 before 3.32.0 contains a heap buffer overflow vulnerability in collect keys() that allows local attackers to write past the fixed 64-entry keys array during PKCS#11 key enumeration. Attackers controlling smartcard tokens can present more than 64 public key objects across multiple slots to corrupt heap memory with attacker-chosen CKA ID and CKA LABEL data during smartcard logon.
Exploit
Fix
Improper Validation of Array Index
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Freerdp