ZeroDay Findings
Sign inSign up

Findings

CVE-2026-109676

FreeRDP from 3.0.0-beta1 before 3.32.0 contains a use-after-free vulnerability in smartcard handling that allows attackers to access a freed smartcard handle object after an invali

Published Oct 13, 2026 · updated Oct 14, 2026

FreeRDP from 3.0.0-beta1 before 3.32.0 contains a use-after-free vulnerability in smartcard handling that allows attackers to access a freed smartcard handle object after an invalid connect operation. Attackers can trigger an invalid smartcard connect operation to cause reuse of the freed handle, leading to memory corruption or crashes.

Timeline

Detection, updates, and resolution for this record.

  1. Oct 13, 2026 · OSV.dev

    Detected

    FreeRDP from 3.0.0-beta1 before 3.32.0 contains a use-after-free vulnerability in smartcard handling that allows attackers to access a freed smartcard handle object after an invalid connect operation. Attackers can trigger an invalid smartcard connect operation to cause reuse of the freed handle, leading to memory corruption or crashes.

  2. Oct 14, 2026 · OSV.dev

    Fix available

    freerdp3 fixed in 3.32.0+dfsg-1

  3. Oct 14, 2026 · OSV.dev

    Fix available

    freerdp3 fixed in 3.32.0+dfsg-1

  4. Oct 14, 2026 · OSV.dev

    Updated

    FreeRDP from 3.0.0-beta1 before 3.32.0 contains a use-after-free vulnerability in smartcard handling that allows attackers to access a freed smartcard handle object after an invalid connect operation. Attackers can trigger an invalid smartcard connect operation to cause reuse of the freed handle, leading to memory corruption or crashes.

  5. Oct 14, 2026 · NIST NVD

    Updated

    FreeRDP from 3.0.0-beta1 before 3.32.0 contains a use-after-free vulnerability in smartcard handling that allows attackers to access a freed smartcard handle object after an invalid connect operation. Attackers can trigger an invalid smartcard connect operation to cause reuse of the freed handle, leading to memory corruption or crashes.

Affected

  • Debian:12 freerdp22.10.0+dfsg1-1, 2.10.0+dfsg1-1.1, 2.11.2+dfsg1-1
  • Debian:13 freerdp33.15.0+dfsg-2.1, 3.15.0+dfsg-2.1+deb13u1, 3.15.0+dfsg-2.1+deb13u2
  • Debian:14 freerdp30 → 3.32.0+dfsg-1

Sources

  • CVE.orgCVE-2026-109676

    Official CVE identifier

    cve.org
  • FIRST EPSSCVE-2026-109676

    30-day exploitation probability 0.3%

    first.org
  • NIST NVDCVE-2026-109676

    FreeRDP from 3.0.0-beta1 before 3.32.0 contains a use-after-free vulnerability in smartcard handling that allows attackers to access a freed smartcard handle object after an invalid connect operation. Attackers can trigger an invalid smartcard connect operation to cause reuse of

    nvd.nist.gov
  • OSV.devDEBIAN-CVE-2026-109676
    osv.dev

References