# CVE-2026-114046: FreeRDP null-pointer dereference in smartcard emulation

Source: https://junglewise.ai/threats/cve-2026-114046-freerdp-3-0-0-before-3-32-0-contains-a-null-pointer-dereference  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-10-21. Updated: 2026-10-21  
License: CC BY 4.0 with a link back

CVE-2026-114046 · Severity: medium · CVSS 6.5 · Published 2026-10-21

FreeRDP is an open-source Remote Desktop Protocol client that allows users to connect to Windows servers and desktops. A malicious RDP server can crash the FreeRDP client by sending a crafted smartcard request with a null reader name, causing denial of service. Affected users must restart the client to reconnect, and an attacker could repeatedly crash the connection on reconnection attempts.

Technologies: [FreeRDP Project FreeRDP](https://junglewise.ai/threats/technologies/freerdp-project-freerdp). Vendors: [FreeRDP Project](https://junglewise.ai/threats/vendors/freerdp-project).

## Quick answers

**Is CVE-2026-114046 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-114046 being exploited in the wild.

**How severe is CVE-2026-114046?** Medium severity, with a CVSS score of 6.5, published 21 October 2026.

**Which products and versions are affected?** FreeRDP Project FreeRDP 3.0.0 before 3.32.0.

**Is there a fix for CVE-2026-114046?** Yes: fixed in 3.32.0. Until then: Disable smartcard emulation if not required, or restrict RDP connections to trusted servers only until upgrading. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-114046 attacked?** It is attacked over the network, in a software library.

**Am I affected by CVE-2026-114046?** Check whether you run FreeRDP Project FreeRDP at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## How to fix

- Fixed in 3.32.0

Disable smartcard emulation if not required, or restrict RDP connections to trusted servers only until upgrading.

## Technical details

A null-pointer dereference exists in the smartcard emulation backend when processing SCardGetStatusChange requests with a null per-reader name (szReader). The vulnerable code compares the remote reader name without null validation, calling strcmp or _wcscmp on a NULL pointer. The vulnerability requires smartcard emulation to be enabled and a network connection to the malicious RDP server; no authentication or user interaction is needed beyond initiating the connection.

## Affected products

- FreeRDP Project FreeRDP 3.0.0 before 3.32.0

## Timeline

- 2026-10-05: disclosed
- 2026-10-21: advisory

## References

- [https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-q6pp-28g8-xqjc](https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-q6pp-28g8-xqjc)
- [https://www.vulncheck.com/advisories/freerdp-3.0.0-before-3.32.0-null-pointer-dereference-via-emulated-smartcard](https://www.vulncheck.com/advisories/freerdp-3.0.0-before-3.32.0-null-pointer-dereference-via-emulated-smartcard)

## Related threats

- [FreeRDP heap buffer overflow in transport_default_read_pdu](https://junglewise.ai/threats/cve-2026-121962-freerdp-before-3-32-2-contains-a-heap-buffer-overflow-in)
- [FreeRDP use-after-free in DRDYNVC tracker race condition](https://junglewise.ai/threats/cve-2026-121961-freerdp-before-3-32-2-contains-a-use-after-free-vulnerability-in)
- [FreeRDP infinite loop in WebSocket frame handling](https://junglewise.ai/threats/cve-2026-121959-freerdp-before-3-32-2-contains-an-infinite-loop-vulnerability-in)
- [FreeRDP server denial of service in RDP peer input parsing](https://junglewise.ai/threats/cve-2026-121951-freerdp-3-0-0-before-3-32-2-server-side-rdp-peer-input-parsing)
- [FreeRDP NULL pointer dereference in RDPGFX ResetGraphics](https://junglewise.ai/threats/cve-2026-121402-freerdp-before-3-32-2-contains-a-null-pointer-dereference)