Количество 8
Количество 8
CVE-2026-67304
FreeRDP before 3.29.0 contains a null pointer dereference vulnerability in smartcard device control request cleanup when reader-state decoding fails. Attackers can send malformed smartcard IRP requests with non-zero cReaders and truncated reader-state data to crash the process via null pointer access in free_reader_states functions.
CVE-2026-67304
FreeRDP before 3.29.0 contains a null pointer dereference vulnerability in smartcard device control request cleanup when reader-state decoding fails. Attackers can send malformed smartcard IRP requests with non-zero cReaders and truncated reader-state data to crash the process via null pointer access in free_reader_states functions.
CVE-2026-67304
FreeRDP before 3.29.0 contains a null pointer dereference vulnerability in smartcard device control request cleanup when reader-state decoding fails. Attackers can send malformed smartcard IRP requests with non-zero cReaders and truncated reader-state data to crash the process via null pointer access in free_reader_states functions.
CVE-2026-67304
FreeRDP before 3.29.0 contains a null pointer dereference vulnerabilit ...
GHSA-6x5p-r76q-h5g9
FreeRDP before 3.29.0 contains a null pointer dereference vulnerability in smartcard device control request cleanup when reader-state decoding fails. Attackers can send malformed smartcard IRP requests with non-zero cReaders and truncated reader-state data to crash the process via null pointer access in free_reader_states functions.
BDU:2026-10990
Уязвимость функций free_reader_states_a() и free_reader_states_w() RDP-клиента FreeRDP, позволяющая нарушителю вызвать отказ в обслуживании
RLSA-2026:61378
Important: freerdp security update
ELSA-2026-61378-0
ELSA-2026-61378-0: freerdp security update (IMPORTANT)
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-67304 FreeRDP before 3.29.0 contains a null pointer dereference vulnerability in smartcard device control request cleanup when reader-state decoding fails. Attackers can send malformed smartcard IRP requests with non-zero cReaders and truncated reader-state data to crash the process via null pointer access in free_reader_states functions. | CVSS3: 7.5 | 0% Низкий | около 2 месяцев назад |
 | CVE-2026-67304 FreeRDP before 3.29.0 contains a null pointer dereference vulnerability in smartcard device control request cleanup when reader-state decoding fails. Attackers can send malformed smartcard IRP requests with non-zero cReaders and truncated reader-state data to crash the process via null pointer access in free_reader_states functions. | CVSS3: 6.5 | 0% Низкий | около 2 месяцев назад |
 | CVE-2026-67304 FreeRDP before 3.29.0 contains a null pointer dereference vulnerability in smartcard device control request cleanup when reader-state decoding fails. Attackers can send malformed smartcard IRP requests with non-zero cReaders and truncated reader-state data to crash the process via null pointer access in free_reader_states functions. | CVSS3: 7.5 | 0% Низкий | около 2 месяцев назад |
| CVE-2026-67304 FreeRDP before 3.29.0 contains a null pointer dereference vulnerabilit ... | CVSS3: 7.5 | 0% Низкий | около 2 месяцев назад |
| GHSA-6x5p-r76q-h5g9 FreeRDP before 3.29.0 contains a null pointer dereference vulnerability in smartcard device control request cleanup when reader-state decoding fails. Attackers can send malformed smartcard IRP requests with non-zero cReaders and truncated reader-state data to crash the process via null pointer access in free_reader_states functions. | CVSS3: 7.5 | 0% Низкий | около 2 месяцев назад |
 | BDU:2026-10990 Уязвимость функций free_reader_states_a() и free_reader_states_w() RDP-клиента FreeRDP, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 7.5 | 0% Низкий | 2 месяца назад |
 | RLSA-2026:61378 Important: freerdp security update | 21 день назад | ||
| ELSA-2026-61378-0 ELSA-2026-61378-0: freerdp security update (IMPORTANT) | 22 дня назад |
Уязвимостей на страницу