The vulnerability is a stack-based buffer overflow in the WinPR PKCS#11 provider function wprintKeyName. It occurs when the function hex-encodes a key's CKA_ID, which can be up to 64 bytes, into a fixed 128‑byte buffer on the stack. If an attacker supplies a malicious PKCS#11 token or module whose key and certificate use a 55‑ to 64‑byte CKA_ID, the overflow corrupts the stack and causes the FreeRDP client to crash. The resulting impact is service disruption, providing a denial‑of‑service condition. The vulnerability does not, by itself, allow an attacker to execute arbitrary code or exfiltrate data, so confidentiality and integrity are not directly affected.

Affected systems are FreeRDP installations built for Unix with PKCS#11 support, ranging from the initial 3.0.0‑beta1 release through all versions prior to 3.32.0. The vendor FreeRDP is the only product listed. No specific operating systems are mentioned, but the issue applies to any Unix build that enables the PKCS#11 provider.

The CVSS score of 5.1 indicates a moderate severity primarily driven by the Denial‑of‑Service impact. The EPSS score is not available, and the vulnerability is not listed in CISA’s KEV catalog, suggesting no widespread exploitation evidence at this time. Exploitation would require the attacker to supply a malicious PKCS#11 token or module that the client enumerates; if the client uses local tokens this can be considered a local or user‑specific threat, while a remotely delivered token could be used in a remote exploitation scenario. Given the lack of public exploit data, the risk is primarily availability loss in environments that use large CKA_IDs.