Threats tagged 'ghsa-59q5-wg5w-gxp4'

FreeRDP versions prior to 3.32.2 have a use-after-free vulnerability in the Emulate_SCardReleaseContext function. This flaw occurs because the emulated SCardContext is freed before its worker thread is properly cancelled and joined. A malicious server can exploit this by sending a sequence of smartcard IRPs (ESTABLISHCONTEXT, a long-timeout GETSTATUSCHANGE, then RELEASECONTEXT) to cause heap corruption or crash the client.