CyberRota Analysis
AI-GeneratedFreeRDP versions prior to 3.29.0 are vulnerable to a null pointer dereference that can be exploited through malformed smartcard IRP requests, leading to process crashes. This vulnerability poses a significant risk as it can be leveraged by attackers to disrupt service availability. Organizations using FreeRDP should prioritize patching to mitigate potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
FreeRDP before 3.29.0 contains a null pointer dereference vulnerability in smartcard device control request cleanup when reader-state decoding fails. Attackers can send malformed smartcard IRP requests with non-zero cReaders and truncated reader-state data to crash the process via null pointer access in free_reader_states functions.