medium6.5
CVE-2026-114046
FreeRDP 3.0.0 before 3.32.0 contains a null-pointer dereference in the smartcard emulation backend that accepts a null per-reader name in SCardGetStatusChange …
Impact
FreeRDP 3.0.0 before 3.32.0 contains a null-pointer dereference in the smartcard emulation backend that accepts a null per-reader name in SCardGetStatusChange requests. A malicious RDP server can send a crafted reader-state entry with a null szReader, causing strcmp or _wcscmp to crash the client process.
Affected products
| Product | Affected versions |
|---|---|
| FreeRDP 3.0.0 | before 3.32.0 |
Versions were read from the advisory text. No structured product data has been published for this record yet.