CVE-2026-109948

FreeRDP versions 3.0.0 before 3.32.0 are vulnerable to an uninitialized memory disclosure within the smartcard_Transmit_Call function. A malicious RDP server can exploit this by sending SCardTransmit requests with an invalid card handle and a nonzero receive length. This causes smartcard_pack_tra...

CVE-2026-109944

FreeRDP versions 3.0.0 before 3.32.0 are vulnerable to a Reachable Assertion (CWE-617) due to improper handle management. The software fails to remove card handles when Emulate_SCardReleaseContext releases a smartcard-emulation context. Consequently, a subsequent call to Emulate_SCardTransmit may...