Heap Buffer Overflow in FreeRDP Affects Smartcard Token Operations

CVE-2026-109250

What is CVE-2026-109250?

FreeRDP versions prior to 3.32.0 are susceptible to a heap buffer overflow in the collect_keys() function. This vulnerability enables local attackers to manipulate key enumeration for PKCS#11, particularly when handling smartcard tokens. By presenting more than 64 public key objects across different slots, attackers can overwrite memory in a way that may lead to unauthorized access or execution of arbitrary code. This issue particularly concerns users of smartcard logon systems relying on FreeRDP's functionality.

References