CVE-2026-91945 in FreeRDP
Riassunto
di MITRE • 15/09/2026
FreeRDP versions before 3.31.0 contain an out-of-bounds read vulnerability in smartcard response decoders that fail to validate ATR length fields against fixed inline arrays. Authenticated RDP clients can send oversized ATR lengths in PAKID_CORE_DEVICE_IOCOMPLETION responses to trigger reads past stack or heap objects, causing process termination.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.