FreeRDP contains two buffer overflow vulnerabilities: a global buffer overflow (CVE-2026-22858) and a heap buffer overflow (CVE-2026-22859). These vulnerabilities could potentially allow an attacker to cause memory corruption when using the xfreerdp client to connect to RDP servers. Red Hat Product Security has rated the update as Important and has released patched packages for affected versions of Red Hat Enterprise Linux 8.2 AUS. The advisory references the CVE pages for detailed impact and scoring information.

The vulnerabilities involve buffer overflows that could lead to memory corruption. While the exact impact is not detailed in the advisory, such issues typically carry risks of application crashes or potential code execution. Red Hat rates the security impact as Important, indicating a significant security concern but not necessarily critical. There are no known exploits in the wild at the time of the advisory.

Red Hat has released updated freerdp packages for Red Hat Enterprise Linux 8.2 AUS that address these vulnerabilities. Users should apply the security update as described in the Red Hat advisory RHSA-2026:4433 to remediate these issues. For detailed update instructions, refer to https://access.redhat.com/articles/11258. No additional mitigation steps are indicated by the vendor.