CVE-2026-109945
MEDIUM
NVD
CVSS Score
5.3
Severity
MEDIUM
Published
Oct 13, 2026
Vendor
unknown
Description
FreeRDP 3.0.0 before 3.32.0 contains a heap use-after-free vulnerability in smartcard emulation when SCARD_IOCTL_DISCONNECT and SCARD_IOCTL_TRANSMIT operate concurrently on one card handle. A malicious RDP server can overlap these IRPs through separate context workers to free and reuse the SCardHandle, causing client-process heap corruption and termination.