FreeRDP contains multiple security flaws including heap use-after-free during auto-reconnect (CVE-2026-25997), use-after-free (CVE-2026-25952), double free during disconnect (CVE-2026-26986), heap-buffer-overflow via out-of-bounds cacheId (CVE-2026-29775), out-of-bounds read in ADPCM decoders due to missing bounds checks (CVE-2026-31885), division-by-zero in ADPCM decoders when nBlockAlign is zero (CVE-2026-31884), denial of service via crafted audio data (CVE-2026-31883), information disclosure via heap out-of-bounds read (CVE-2026-33985), information disclosure and denial of service via heap-buffer-overflow read (CVE-2026-33982), and memory corruption allowing denial of service or arbitrary code execution (CVE-2026-33987). These vulnerabilities affect FreeRDP as packaged in Red Hat Enterprise Linux 10 and related CodeReady Linux Builder products. Red Hat has released updated packages to address these issues.

The vulnerabilities collectively allow attackers to cause denial of service conditions through use-after-free, double free, heap-buffer-overflow, out-of-bounds reads, and division-by-zero errors. Additionally, some flaws may lead to information disclosure or memory corruption that could enable arbitrary code execution. The impact ranges from service disruption to potential remote code execution depending on the specific vulnerability exploited.

Red Hat has released updated freerdp packages for Red Hat Enterprise Linux 10 and related products that address these vulnerabilities. Users should apply the security update as described in Red Hat advisory RHSA-2026:16014 and the referenced article https://access.redhat.com/articles/11258 to remediate these issues. No additional mitigation steps are indicated beyond applying the official update.