Skip to content

CVE record · 1 source

CVE-2026-109677

CVSS 6.5

FreeRDP from 2.0.0-beta1 before 3.28.0 contains an out-of-bounds read vulnerability in smartcard_LocateCardsByATRA_Call because the ATR pattern cbAtr…

Vendor: Oracle
Product: oracle
CVSS: 6.5
Exposure class: Remote access

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

21

CVE NVD 18d ago

FreeRDP from 2.0.0-beta1 before 3.28.0 contains an out-of-bounds read vulnerability in smartcard_LocateCardsByATRA_Call because the ATR pattern cbAtr…

FreeRDP from 2.0.0-beta1 before 3.28.0 contains an out-of-bounds read vulnerability in smartcard_LocateCardsByATRA_Call because the ATR pattern cbAtr byte count is not capped. Malicious RDP servers can send crafted ATR mask…

CVSS 6.5 CVE-2026-109677 Oracle