PT-2026-111540 · Freerdp+1 · Freerdp
CVSS v4.0
6.0
Medium
| Vector | AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N |
Name of the Vulnerable Software and Affected Versions
FreeRDP versions 3.0.0 through 3.31.0
Description
A heap use-after-free issue exists in smartcard emulation. This occurs when
SCARD IOCTL DISCONNECT and SCARD IOCTL TRANSMIT operate concurrently on a single card handle. A malicious RDP server can overlap these IRPs (I/O Request Packets) using separate context workers to free and reuse the SCardHandle, leading to heap corruption and termination of the client process.Recommendations
Update FreeRDP to version 3.32.0 or later.
Exploit
Fix
Race Condition
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Freerdp