Advisory severityMedium6.5Red Hat Linux

Medium [CVE-2026-114046] null pointer dereference in smartcard emulation via crafted reader name

This medium-severity Red Hat Linux advisory covers CVE-2026-114046 affecting Red Hat Enterprise Linux 10, Red Hat package: freerdp.

Aggregated and source-linked by VulniPulse. Data sources, validation and limitations.

CVE-2026-114046 Source published Oct 21, 2026Source updated Oct 21, 2026

VulniPulse record published Oct 21, 2026

CVE-2026-114046

Affected products & platforms

Red Hat LinuxRed Hat Enterprise Linux

Open source advisory

Android app · Google Play

Monitor future Red Hat Linux CVEs from your phone.

Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.

Matching phone alertsOptional email delivery

Get CVE alerts See app features

Summary

A flaw was found in FreeRDP. The smartcard emulation backend accepts a null per-reader name in SCardGetStatusChange requests.

A malicious RDP server can send a crafted reader-state entry with a null szReader, causing strcmp or _wcscmp to crash the client process. This issue affects FreeRDP 3.0.0 before 3.32.0 when smartcard emulation is enabled.

This issue is rated Moderate because a user must connect the FreeRDP client to a malicious or compromised RDP server (UI:R), and the demonstrated impact is a client crash only (availability), with no confirmed confidentiality or integrity impact. Exploitation requires smartcard emulation to be enabled for the session.

Red Hat Enterprise Linux 8 and 9 ship FreeRDP 2.x, which does not include this smartcard emulation code path and are not affected. Red Hat severity: Moderate — CVSS 6.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H).

Weakness: CWE-476. Red Hat does not currently list a fixing RHSA for this CVE.

Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat package: freerdp.

Affected versions

< 3.0.0
< 3.32.0

Official advisory · high-confidence parse· fetched 37 minutes ago·verify at source

Fixed versions

No fixed release is recorded yet. That does not prove no patch exists — confirm against the vendor advisory.

Official advisory · high-confidence parse· fetched 37 minutes ago·verify at source

Mitigation checklist

Recommended fix / mitigation

Do not connect FreeRDP clients to untrusted RDP servers. If smartcard emulation is not required, disable it in the FreeRDP client configuration.

Official advisory · high-confidence parse· fetched 37 minutes ago·verify at source

Discussion(0)

No comments yet. Share field notes, upgrade gotchas, or questions — verify against the vendor advisory before acting on community advice.