FreeRDP contains three distinct buffer overflow vulnerabilities: two heap-buffer-overflows (CVE-2026-22855 and CVE-2026-22859) and one global-buffer-overflow (CVE-2026-22858). These vulnerabilities could potentially lead to memory corruption when using the xfreerdp client to connect to RDP servers. Red Hat has released updated packages for affected Red Hat Enterprise Linux 8.4 variants to address these issues. The advisory references bugzilla entries and provides updated package versions for mitigation.

The identified vulnerabilities involve heap and global buffer overflows, which may allow an attacker to cause memory corruption. This could potentially lead to denial of service or code execution in the context of the user running the xfreerdp client. The advisory rates the security impact as Important (high severity). There are no known exploits in the wild at the time of the advisory.

Red Hat has released updated freerdp packages for Red Hat Enterprise Linux 8.4 Advanced Update Support and Extended Update Support. Users should apply these official patches to remediate the vulnerabilities. For detailed update instructions, refer to the Red Hat article at https://access.redhat.com/articles/11258. No alternative mitigations or workarounds are specified. Patch status is confirmed as an official fix available from Red Hat.