CVE-2026-109676: FreeRDP 3.0.0-beta1 before 3.32.0 Use-After-Free via Smartcard Connect
FreeRDP from 3.0.0-beta1 before 3.32.0 contains a use-after-free vulnerability in smartcard handling that allows attackers to access a freed smartcard handle object after an invalid connect operation. Attackers can trigger an invalid smartcard connect operation to cause reuse of the freed handle, leading to memory corruption or crashes.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/freerdp3to a version that resolves this vulnerability.Fixed in 3.32.0+dfsg-1 - Upgrade
Upgrade
debian/freerdp3to a version that resolves this vulnerability.Fixed in 3.32.2+dfsg-1Fixed in 3.33.0+dfsg-1
Event History
Frequently Asked Questions
Which FreeRDP versions are affected?
FreeRDP versions from 3.0.0-beta1 through versions before 3.32.0 are affected. Version 3.32.0 is outside the stated affected range.
Does exploitation require authentication or user involvement?
The supplied CVSS vector indicates that an attacker does not need privileges, but user interaction is required. The attack is network-reachable and has low attack complexity.