This advisory covers three security flaws in FreeRDP, specifically heap-buffer-overflow and global-buffer-overflow vulnerabilities identified as CVE-2026-22855, CVE-2026-22858, and CVE-2026-22859. FreeRDP is an open-source RDP client used to connect to various RDP servers. The vulnerabilities could allow memory corruption issues, potentially leading to crashes or other unintended behavior. Red Hat has released updated FreeRDP packages for Red Hat Enterprise Linux 8.6 variants to address these issues. The advisory references bugzilla entries and provides package updates for affected architectures. No CVSS scores are provided in the advisory, but the impact is rated as important by Red Hat Product Security.

The vulnerabilities involve heap and global buffer overflows in FreeRDP, which may lead to memory corruption. Such issues can cause application crashes or potentially enable further exploitation depending on the context. Red Hat rates the security impact as important, indicating a high severity but not critical. There are no known exploits in the wild at the time of the advisory.

Red Hat has released updated FreeRDP packages for Red Hat Enterprise Linux 8.6 variants that fix these vulnerabilities. Users should apply the security update as detailed in Red Hat advisory RHSA-2026:4446 and the referenced article https://access.redhat.com/articles/11258. No additional mitigation steps are indicated or required beyond applying the official update.