Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-q4hc-p825-q7j9

Опубликовано: 13 окт. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 8.7
CVSS3: 8.8

Описание

FreeRDP from 3.0.0-beta1 before 3.32.0 contains a use-after-free vulnerability in smartcard handling that allows attackers to access a freed smartcard handle object after an invalid connect operation. Attackers can trigger an invalid smartcard connect operation to cause reuse of the freed handle, leading to memory corruption or crashes.

FreeRDP from 3.0.0-beta1 before 3.32.0 contains a use-after-free vulnerability in smartcard handling that allows attackers to access a freed smartcard handle object after an invalid connect operation. Attackers can trigger an invalid smartcard connect operation to cause reuse of the freed handle, leading to memory corruption or crashes.

EPSS

Процентиль: 18%
0.00264
Низкий

8.7 High

CVSS4

8.8 High

CVSS3

Дефекты

CWE-416

Связанные уязвимости

CVSS3: 8.8
ubuntu
27 дней назад

FreeRDP from 3.0.0-beta1 before 3.32.0 contains a use-after-free vulnerability in smartcard handling that allows attackers to access a freed smartcard handle object after an invalid connect operation. Attackers can trigger an invalid smartcard connect operation to cause reuse of the freed handle, leading to memory corruption or crashes.

CVSS3: 8.8
redhat
27 дней назад

FreeRDP from 3.0.0-beta1 before 3.32.0 contains a use-after-free vulnerability in smartcard handling that allows attackers to access a freed smartcard handle object after an invalid connect operation. Attackers can trigger an invalid smartcard connect operation to cause reuse of the freed handle, leading to memory corruption or crashes.

CVSS3: 8.8
nvd
27 дней назад

FreeRDP from 3.0.0-beta1 before 3.32.0 contains a use-after-free vulnerability in smartcard handling that allows attackers to access a freed smartcard handle object after an invalid connect operation. Attackers can trigger an invalid smartcard connect operation to cause reuse of the freed handle, leading to memory corruption or crashes.

CVSS3: 8.8
debian
27 дней назад

FreeRDP from 3.0.0-beta1 before 3.32.0 contains a use-after-free vulne ...

oracle-oval
6 дней назад

ELSA-2026-94514: freerdp security, bug fix, and enhancement update (IMPORTANT)

EPSS

Процентиль: 18%
0.00264
Низкий

8.7 High

CVSS4

8.8 High

CVSS3

Дефекты

CWE-416