SEPTEMBER 20, 2026
Live Feed
Back to database
Case File

CVE-2026-67304

HIGH · CVSS 7.5 EPSS 0.35% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-08-01 · Last synced 2026-08-31

CyberRota Analysis

AI-Generated

FreeRDP versions prior to 3.29.0 are vulnerable to a null pointer dereference that can be exploited through malformed smartcard IRP requests, leading to process crashes. This vulnerability poses a significant risk as it can be leveraged by attackers to disrupt service availability. Organizations using FreeRDP should prioritize patching to mitigate potential exploitation.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-67304
Severity
HIGH
CVSS
7.5
EPSS
0.35%

Original NVD Description

FreeRDP before 3.29.0 contains a null pointer dereference vulnerability in smartcard device control request cleanup when reader-state decoding fails. Attackers can send malformed smartcard IRP requests with non-zero cReaders and truncated reader-state data to crash the process via null pointer access in free_reader_states functions.