FreeRDP, an open-source RDP client, contains multiple vulnerabilities including denial of service via use-after-free (CVE-2026-25952), double free during disconnect (CVE-2026-26986), endless blocking loop in Stream_EnsureCapacity (CVE-2026-27951), heap-buffer-overflow in bitmap_cache_put (CVE-2026-29775), out-of-bounds read in ADPCM decoders due to missing bounds checks (CVE-2026-31885), division-by-zero in ADPCM decoders when nBlockAlign is zero (CVE-2026-31884), denial of service via crafted audio data (CVE-2026-31883), and information disclosure via heap memory out-of-bounds read (CVE-2026-33985). These vulnerabilities have been addressed in updated packages provided by Red Hat for their Enterprise Linux 9.0 Update Services for SAP Solutions. The advisory rates the security impact as moderate and provides updated packages to remediate these issues.

The vulnerabilities can lead to denial of service conditions through memory corruption and logic errors, including use-after-free, double free, endless loops, and division-by-zero errors. Additionally, one vulnerability allows information disclosure through out-of-bounds heap memory reads. These issues could disrupt RDP client operations and potentially expose sensitive memory contents. No known exploits in the wild have been reported at this time.

Red Hat has released updated freerdp packages for Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions that address these vulnerabilities. Users should apply these official security updates as detailed in the Red Hat advisory RHSA-2026:16485. For update instructions, refer to https://access.redhat.com/articles/11258. No additional mitigation steps are indicated beyond applying the provided patches.