FreeRDP, the open-source RDP client included in Red Hat Enterprise Linux 8, contains multiple security vulnerabilities: CVE-2026-25952 (use-after-free leading to denial of service), CVE-2026-26986 (double free during disconnect causing denial of service), CVE-2026-27951 (endless blocking loop causing denial of service), CVE-2026-29775 (heap-buffer-overflow via out-of-bounds cacheId), CVE-2026-31885 (out-of-bounds read in ADPCM decoders due to missing bounds checks), CVE-2026-31884 (division-by-zero in ADPCM decoders when nBlockAlign is zero), CVE-2026-31883 (denial of service via crafted audio data), and CVE-2026-33985 (information disclosure via heap memory out-of-bounds read). Red Hat has released updated packages for Red Hat Enterprise Linux 8 to address these issues.

The vulnerabilities collectively allow an attacker to cause denial of service conditions through memory corruption, use-after-free, double free, endless loops, and crafted audio data. Additionally, there is potential for information disclosure due to out-of-bounds heap reads. These issues could disrupt the availability of the FreeRDP client or expose sensitive memory contents. No known exploits in the wild have been reported at this time.

Red Hat has released updated freerdp packages for Red Hat Enterprise Linux 8 that address these vulnerabilities. Users should apply the security update as described in Red Hat advisory RHSA-2026:16019 and the referenced article https://access.redhat.com/articles/11258. Since this is not a cloud service, remediation requires updating the affected packages on the systems. Patch status is confirmed by the vendor advisory.