CVE-2026-114046

Name of the Vulnerable Software and Affected Versions FreeRDP versions 3.0.0 through 3.31.0

Description A null-pointer dereference exists in the smartcard emulation backend. This occurs when the system accepts a null per-reader name during SCardGetStatusChange requests. A malicious RDP server can trigger a client process crash by sending a crafted reader-state entry containing a null szReader variable, which leads to a failure in the strcmp() or wcscmp() functions.

Recommendations Update FreeRDP to version 3.32.0 or later.