CVE-2026-109250

A flaw was found in FreeRDP. This vulnerability allows a local attacker with access to a physical smartcard or token to trigger a heap-based buffer overflow during smartcard key enumeration. By presenting more public key objects across multiple slots than the internal storage buffer can hold, an attacker can corrupt heap memory with controlled data. This issue may lead to arbitrary code execution or a Denial of Service (DoS) via an application crash.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.