FreeRDP, an open-source RDP client, contains multiple buffer overflow vulnerabilities: two heap-buffer-overflows (CVE-2026-22855 and CVE-2026-22859) and one global-buffer-overflow (CVE-2026-22858). These vulnerabilities could potentially allow memory corruption. Red Hat has released updated freerdp packages for Red Hat Enterprise Linux 9.4 Extended Update Support and related variants to fix these issues. The advisory references Red Hat Bugzilla entries 2429645, 2429649, and 2429653 for the respective CVEs. No CVSS scores are provided in the advisory, but the severity is rated as Important by Red Hat Product Security.

The vulnerabilities involve heap and global buffer overflows in the freerdp client, which could lead to memory corruption. The advisory does not specify exploitation details or confirmed active exploits. The impact is rated as Important by Red Hat, indicating a significant security risk if unpatched. No known exploits in the wild have been reported at the time of the advisory.

Red Hat has released updated freerdp packages for Red Hat Enterprise Linux 9.4 Extended Update Support and related products to address these vulnerabilities. Users should apply the provided security updates as detailed in the Red Hat advisory RHSA-2026:4438 and the referenced article https://access.redhat.com/articles/11258. No additional mitigation steps are indicated beyond applying the official patches.