Heap Use-After-Free Vulnerability in FreeRDP Products by FreeRDP

CVE-2026-109945

What is CVE-2026-109945?

FreeRDP versions before 3.32.0 are susceptible to a heap use-after-free vulnerability related to smartcard emulation. This occurs when the SCARD_IOCTL_DISCONNECT and SCARD_IOCTL_TRANSMIT commands are executed simultaneously on a single card handle. A malicious RDP server can trigger overlapping IRP operations utilizing separate context workers, leading to the freeing and reuse of the SCardHandle. Exploitation of this vulnerability may result in heap corruption within the client process, potentially causing unexpected termination of the application.

References