Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
FreeRDP before 3.29.0 contains a null pointer dereference vulnerability in smartcard cache request decoders that accept NULL NDR pointers for LookupName in SCARD_IOCTL_READCACHEA and SCARD_IOCTL_WRITECACHEA operations. When smartcard emulation is enabled, attackers can send crafted smartcard cache requests with NULL lookup-name pointers to trigger strlen() on a null pointer, causing client process termination.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-67288 FreeRDP before 3.29.0 contains a null pointer dereference vulnerability in smartcard cache request decoders that accept NULL NDR pointers for LookupName in SCARD_IOCT… https://www.cve.org/CVERecord?id=CVE-2026-67288
Post summary
CVE-2026-67288 identifies a null pointer dereference in FreeRDP’s smartcard cache request decoders affecting versions prior to 3.29.0.
FreeRDP before 3.29.0 has a null pointer dereference (CVSS 8.7) in smartcard cache handling. Update if your environment uses it: https://nvd.nist.gov/vuln/detail/CVE-2026-67288 via NVD Recent High CVSS #CyberSecurity #InfoSec #Vulnerability #AI #MachineLearning https://t.co/E2zTWB9X9N
Post summary
The tweet announces a null pointer dereference vulnerability (CVSS 8.7) in FreeRDP before 3.29.0, advises updating environments that use it, and links to the NVD CVE record.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | freerdp | freerdp | - | - | - |