FreeRDP in Red Hat Enterprise Linux 8.6 contains multiple security vulnerabilities: CVE-2026-25952 (use-after-free leading to denial of service), CVE-2026-26986 (double free causing denial of service during disconnect), CVE-2026-27951 (endless blocking loop causing denial of service), CVE-2026-29775 (heap-buffer-overflow via out-of-bounds cacheId), CVE-2026-31885 (out-of-bounds read in ADPCM decoders due to missing bounds checks), CVE-2026-31884 (division-by-zero in ADPCM decoders when nBlockAlign is zero), CVE-2026-31883 (denial of service via crafted audio data), and CVE-2026-33985 (information disclosure via heap memory out-of-bounds read). These vulnerabilities affect the xfreerdp client and related components. Red Hat has released updated packages to address these issues as detailed in advisory RHSA-2026:16814.

The vulnerabilities collectively can lead to denial of service conditions through memory corruption and logic errors, and one vulnerability allows information disclosure via out-of-bounds heap reads. These issues could disrupt RDP client operations and potentially expose sensitive memory contents. No known exploits in the wild have been reported at this time.

Red Hat has released updated freerdp packages for Red Hat Enterprise Linux 8.6 variants that address these vulnerabilities. Users should apply the security update as described in Red Hat advisory RHSA-2026:16814 and the referenced article https://access.redhat.com/articles/11258. No additional mitigations are specified or required beyond applying the official update.