Description (CNA)
FreeRDP from 3.0.0-beta1 before 3.32.0 contains a use-after-free vulnerability in smartcard handling that allows attackers to access a freed smartcard handle object after an invalid connect operation. Attackers can trigger an invalid smartcard connect operation to cause reuse of the freed handle, leading to memory corruption or crashes.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| FreeRDP / FreeRDP | affected 3.0.0-beta1 before 3.32.0; unaffected 3.32.0 |
CWE
CWE-416
References
- https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-369h-7h2p-4685
- https://www.vulncheck.com/advisories/freerdp-3.0.0-beta1-before-3.32.0-use-after-free-via-smartcard-connect
ADP enrichment
No English description supplied.
No references supplied.