Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
FreeRDP before 3.29.0 contains a null pointer dereference vulnerability in smartcard device control request cleanup when reader-state decoding fails. Attackers can send malformed smartcard IRP requests with non-zero cReaders and truncated reader-state data to crash the process via null pointer access in free_reader_states functions.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-67304 crash trigger: send malformed smartcard device control request with non-zero cReaders but truncated reader-state data. The free_reader_states cleanup function dereferences null. Process dies.
Post summary
The entry reveals how to trigger a crash in CVE‑2026‑67304 via a malformed smartcard control request, but does not mention any PoC, exploit code, active exploitation, or patch.
CVE-2026-67304 - DoS via null ptr deref in FreeRDP smartcard cleanup. CVSS 7.5. Unpatched. Patch when 3.29.0 available. https://www.valtersit.com/cve/CVE-2026-67304/ #CVE #FreeRDP #infosec #cybersecurityawareness #cyebrsecuritytips #cybersecuritynews #devops #devsecops #developer #developers #git #gitlab #github #sysadmin #redteam #blueteam #python #linux #kali #hacker #ethicalhacker #ethicalhacking
Post summary
The post announces CVE-2026-67304, describing a DoS vulnerability in FreeRDP and notes the pending patch available in version 3.29.0, but provides no exploit code or real‑world attack evidence.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | freerdp | freerdp | - | - | - |