CVE-2026-109250

Name of the Vulnerable Software and Affected Versions FreeRDP versions 3.0.0 through 3.31.0

Description A heap buffer overflow occurs in the collect keys() function during PKCS#11 key enumeration. Local attackers can exploit this by using smartcard tokens that present more than 64 public key objects across multiple slots. This allows the attacker to write past the fixed 64-entry keys array and corrupt heap memory using custom CKA ID and CKA LABEL data during the smartcard logon process.

Recommendations Update FreeRDP to version 3.32.0 or later.