Missing Bounds Check in FreeRDP Client Causes Potential Crash on Smartcard Redirection

CVE-2026-27015

What is CVE-2026-27015?

A vulnerability in FreeRDP, an open-source implementation of the Remote Desktop Protocol, has been identified where a missing bounds check in the 'smartcard_unpack_read_size_align()' function can lead to client crashes. This issue can be exploited by a malicious RDP server when smartcard redirection is enabled by users. Specifically, the crash can result from a reachable WINPR_ASSERT call, leading to an abort in affected versions prior to 3.23.0. Users are encouraged to upgrade to version 3.23.0 or later to mitigate this risk.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References