What is GHSA-h5f5-2qh4-2xjm?

GHSA-h5f5-2qh4-2xjm is a security advisory published by GitHub Security Advisories with Low severity. FreeRDP before 3.31.0 contains a use-after-free vulnerability in the smartcard RDPDR device...

Which CVE IDs does GHSA-h5f5-2qh4-2xjm cover?

GHSA-h5f5-2qh4-2xjm covers the following CVE IDs: CVE-2026-91957. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-h5f5-2qh4-2xjm?

GHSA-h5f5-2qh4-2xjm has a CVSS v3 base score of 3.1, published by GitHub Security Advisories.

GHSA-h5f5-2qh4-2xjmLowCVSS 3.1

FreeRDP before 3.31.0 contains a use-after-free vulnerability in the smartcard RDPDR device...

Vendor

GitHub Security Advisories

Published

September 15, 2026

Last Modified

September 15, 2026

🔗 CVE IDs covered (1)

CVE-2026-91957 →

📋 Description

FreeRDP before 3.31.0 contains a use-after-free vulnerability in the smartcard RDPDR device handler when worker thread creation fails after device registration. Attackers can trigger thread creation failure during channel setup to cause device pointer deallocation while devman retains a reference, leading to crash or code execution.

🔗 References (4)

https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-j5mq-3349-gwmm
https://nvd.nist.gov/vuln/detail/CVE-2026-91957
https://www.vulncheck.com/advisories/freerdp-before-3.31.0-use-after-free-via-smartcard-worker
https://github.com/advisories/GHSA-h5f5-2qh4-2xjm