This Red Hat security advisory addresses eight distinct vulnerabilities in FreeRDP, including CVE-2026-25952 (use-after-free leading to denial of service), CVE-2026-26986 (double free during disconnect causing denial of service), CVE-2026-27951 (endless blocking loop causing denial of service), CVE-2026-29775 (heap-buffer-overflow via out-of-bounds cacheId), CVE-2026-31885 (out-of-bounds read in ADPCM decoders due to missing bounds checks), CVE-2026-31884 (division-by-zero in ADPCM decoders when nBlockAlign is zero), CVE-2026-31883 (denial of service via crafted audio data), and CVE-2026-33985 (information disclosure via heap memory out-of-bounds read). These vulnerabilities impact the FreeRDP client implementation on Red Hat Enterprise Linux Server 7 Extended Lifecycle Support across multiple architectures. The advisory provides updated packages to remediate these issues.

The vulnerabilities collectively can cause denial of service conditions through memory corruption (use-after-free, double free), infinite loops, and crafted input handling. Additionally, memory safety issues such as heap-buffer-overflow and out-of-bounds reads may lead to information disclosure. A division-by-zero error may cause crashes. These issues could disrupt RDP client operations and potentially expose sensitive memory contents. No known exploits in the wild have been reported at this time.

Red Hat has released updated packages for Red Hat Enterprise Linux Server 7 Extended Lifecycle Support that address these vulnerabilities. Users should apply the security update as detailed in the Red Hat advisory RHSA-2026:20546 and the referenced article https://access.redhat.com/articles/11258. Applying these official patches is the recommended remediation. No additional vendor mitigation guidance indicates alternative or temporary fixes.