Description
FreeRDP from 3.0.0-beta1 before 3.32.0 contains a use-after-free vulnerability in smartcard handling that allows attackers to access a freed smartcard handle object after an invalid connect operation. Attackers can trigger an invalid smartcard connect operation to cause reuse of the freed handle, leading to memory corruption or crashes.
Published: 2026-10-13
Score: 8.7 High
EPSS: n/a
KEV: No
Impact: Use‑After‑Free in smartcard handling can lead to memory corruption or crashes
Action: Immediate Patch
AI Analysis

Impact

FreeRDP versions 3.0.0‑beta1 through 3.31.x contain a use‑after‑free flaw in the smartcard connect routine. Triggering an invalid smartcard connection causes a freed handle object to be reused, allowing an attacker to manipulate or read memory associated with the freed object, potentially leading to memory corruption or application crashes.

Affected Systems

The vulnerability affects FreeRDP:FreeRDP, the open‑source Remote Desktop Protocol implementation. All releases from 3.0.0‑beta1 up to but not including 3.32.0 are impacted.

Risk and Exploitability

The CVSS score of 8.7 signals a high severity; the EPSS score is not available, and the issue is not listed in CISA’s KEV catalog. Based on the description, it is inferred that the attack requires the ability to cause an invalid smartcard connect operation, which could be performed remotely by an attacker who can connect to an RDP session that has smartcard support enabled. Successful exploitation can corrupt memory or crash the service, providing a foothold for further compromise.

Generated by OpenCVE AI on October 13, 2026 at 15:35 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Apply the latest FreeRDP patch or upgrade to version 3.32.0 or newer.
  • If an upgrade is not immediately possible, disable smartcard support in the FreeRDP configuration or restrict its use to trusted users only.
  • Monitor RDP sessions for unusual smartcard connection attempts and review logs for signs of memory corruption or crashes.

Generated by OpenCVE AI on October 13, 2026 at 15:35 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Tue, 13 Oct 2026 13:45:00 +0000

Type Values Removed Values Added
Description FreeRDP from 3.0.0-beta1 before 3.32.0 contains a use-after-free vulnerability in smartcard handling that allows attackers to access a freed smartcard handle object after an invalid connect operation. Attackers can trigger an invalid smartcard connect operation to cause reuse of the freed handle, leading to memory corruption or crashes.
Title FreeRDP 3.0.0-beta1 before 3.32.0 Use-After-Free via Smartcard Connect
First Time appeared Freerdp
Freerdp freerdp
Weaknesses CWE-416
CPEs cpe:2.3:a:freerdp:freerdp:*:*:*:*:*:*:*:*
Vendors & Products Freerdp
Freerdp freerdp
References
Metrics cvssV3_1

{'score': 8.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'}

cvssV4_0

{'score': 8.7, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N'}

Subscriptions

Freerdp Freerdp
cve-icon MITRE

Status: PUBLISHED

Assigner: VulnCheck

Published:

Updated: 2026-10-13T13:27:05.624Z

Reserved: 2026-10-12T21:08:17.598Z

Link: CVE-2026-109676

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-10-13T14:17:30.747

Modified: 2026-10-13T14:17:30.747

Link: CVE-2026-109676

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-13T15:45:17Z

Weaknesses