Medium severity6.5NVD Advisory· Published Oct 21, 2026

CVE-2026-114046

Description

FreeRDP 3.0.0 before 3.32.0 contains a null-pointer dereference in the smartcard emulation backend that accepts a null per-reader name in SCardGetStatusChange requests. A malicious RDP server can send a crafted reader-state entry with a null szReader, causing strcmp or _wcscmp to crash the client process.

Affected products

Freerdp/Freerdpllm-fuzzy
Range: <3.32.0

Patches

Vulnerability mechanics

References

github.com/FreeRDP/FreeRDP/security/advisories/GHSA-q6pp-28g8-xqjcnvd
www.vulncheck.com/advisories/freerdp-3.0.0-before-3.32.0-null-pointer-dereference-via-emulated-smartcardnvd

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000