FreeRDP, used in Red Hat Enterprise Linux 8.6 variants, contains multiple security vulnerabilities: CVE-2026-25952 (use-after-free leading to denial of service), CVE-2026-26986 (double free during disconnect causing denial of service), CVE-2026-27951 (endless blocking loop causing denial of service), CVE-2026-29775 (heap-buffer-overflow via out-of-bounds cacheId), CVE-2026-31885 (out-of-bounds read in ADPCM decoders due to missing bounds checks), CVE-2026-31884 (division-by-zero in ADPCM decoders when nBlockAlign is zero), CVE-2026-31883 (denial of service via crafted audio data), and CVE-2026-33985 (information disclosure via heap memory out-of-bounds read). These vulnerabilities affect the freerdp packages in Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, Advanced Mission Critical Update Support, and Telecommunications Update Service. Red Hat has released updated freerdp packages to address these issues.

The vulnerabilities primarily allow denial of service conditions through various memory corruption and logic errors, potentially disrupting RDP client functionality. Additionally, one vulnerability allows information disclosure via out-of-bounds heap memory reads. There is no indication of remote code execution or privilege escalation from the provided data. No known exploits in the wild have been reported. The overall security impact is rated as moderate by Red Hat.

Red Hat has released updated freerdp packages for Red Hat Enterprise Linux 8.6 variants that address all listed vulnerabilities. Users should apply these official updates promptly to remediate the issues. For detailed update instructions, refer to Red Hat's advisory at https://access.redhat.com/articles/11258. No alternative mitigations or workarounds are specified in the advisory.