The security advisory from Red Hat addresses three vulnerabilities in FreeRDP: two heap-buffer-overflows (CVE-2026-22855 and CVE-2026-22859) and one global-buffer-overflow (CVE-2026-22858). FreeRDP is an open-source Remote Desktop Protocol client used to connect to RDP servers such as Microsoft Windows, xrdp, and VirtualBox. The advisory provides updated packages for Red Hat Enterprise Linux 9.2 variants, including x86_64, ppc64le, aarch64, and s390x architectures. These vulnerabilities are related to improper memory handling that could lead to buffer overflows. The advisory references Red Hat Bugzilla entries for each CVE and directs users to apply the updated freerdp packages to mitigate the issues. No evidence of known exploits in the wild is reported.

Successful exploitation of these heap and global buffer overflow vulnerabilities could result in memory corruption within the FreeRDP client. This may lead to application crashes or potentially allow an attacker to execute arbitrary code or cause denial of service. The advisory does not provide explicit details on exploitation or impact severity beyond the 'Important' rating by Red Hat Product Security. No known active exploitation is reported at this time.

Red Hat has released updated freerdp packages for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions that address these vulnerabilities. Users should apply these official patches as soon as possible to remediate the issues. Detailed instructions and package links are available in the Red Hat advisory RHSA-2026:4437 at https://access.redhat.com/errata/RHSA-2026:4437. No additional mitigation steps are indicated by the vendor advisory.