CVE-2026-109945

FreeRDP versions 3.0.0 before 3.32.0 are vulnerable to a heap use-after-free vulnerability within the smartcard emulation component. The root cause is a race condition where the SCARD_IOCTL_DISCONNECT and SCARD_IOCTL_TRANSMIT operations occur concurrently on a single card handle. A malicious RDP ...