CVE-2026-109948

FreeRDP versions 3.0.0 before 3.32.0 are vulnerable to an uninitialized memory disclosure within the smartcard_Transmit_Call function. A malicious RDP server can exploit this by sending SCardTransmit requests with an invalid card handle and a nonzero receive length. This causes smartcard_pack_tra...