This advisory covers eight distinct security vulnerabilities in FreeRDP affecting Red Hat Enterprise Linux 9 and related CodeReady Linux Builder products. The issues include denial of service via use-after-free (CVE-2026-25952), double free during disconnect (CVE-2026-26986), endless blocking loop in Stream_EnsureCapacity (CVE-2026-27951), heap-buffer-overflow in bitmap_cache_put (CVE-2026-29775), out-of-bounds read in ADPCM decoders due to missing bounds checks (CVE-2026-31885), division-by-zero in ADPCM decoders when nBlockAlign is zero (CVE-2026-31884), denial of service via crafted audio data (CVE-2026-31883), and information disclosure via heap memory out-of-bounds read (CVE-2026-33985). These vulnerabilities impact the freerdp client and related libraries. Red Hat has issued updated packages to remediate these vulnerabilities.

The vulnerabilities collectively allow an attacker to cause denial of service conditions through memory corruption and logic errors, potentially crashing the freerdp client or causing it to hang. One vulnerability allows information disclosure via out-of-bounds heap memory reads. The issues affect the stability and confidentiality of the FreeRDP client when connecting to RDP servers. No known exploits are reported in the wild at this time.

Red Hat has released updated freerdp packages for Red Hat Enterprise Linux 9 and related products that address these vulnerabilities. Users should apply the security update as described in the Red Hat advisory RHSA-2026:19358 and the referenced article https://access.redhat.com/articles/11258. No additional mitigations are indicated by the vendor advisory. Patch status is confirmed as fixed in the updated packages.