CVE-2026-109948

A flaw was found in FreeRDP. When a user connects to a malicious Remote Desktop Protocol RDP server with smartcard redirection enabled, the server can issue a crafted smartcard transmission request with an invalid card handle. Because FreeRDP fails to properly clear or restrict the response buffe...