FreeRDP, an open-source RDP client, has multiple security vulnerabilities affecting Red Hat Enterprise Linux 8.4 AUS and EUS versions. The vulnerabilities include denial of service caused by use-after-free (CVE-2026-25952), double free during disconnect (CVE-2026-26986), and an endless blocking loop (CVE-2026-27951). There is also a heap-buffer-overflow in bitmap_cache_put (CVE-2026-29775), out-of-bounds read in ADPCM decoders due to missing bounds checks (CVE-2026-31885), division-by-zero in ADPCM decoders when nBlockAlign is zero (CVE-2026-31884), denial of service via crafted audio data (CVE-2026-31883), and information disclosure via heap memory out-of-bounds read (CVE-2026-33985). Red Hat has released updated freerdp packages (version 2.2.0-14.el8_4) to fix these issues as detailed in advisory RHSA-2026:19811.

The vulnerabilities collectively allow an attacker to cause denial of service conditions through memory corruption issues such as use-after-free, double free, blocking loops, and crafted audio data. Additionally, heap-buffer-overflow and out-of-bounds reads can lead to memory corruption or information disclosure. A division-by-zero error can also cause crashes. These issues impact the stability and confidentiality of systems running vulnerable FreeRDP versions on affected Red Hat Enterprise Linux 8.4 platforms.

Red Hat has released updated freerdp packages that address these vulnerabilities. Users of affected Red Hat Enterprise Linux 8.4 AUS and EUS versions should apply the security update RHSA-2026:19811 promptly. Detailed update instructions are available at https://access.redhat.com/articles/11258. There is no indication that these issues are already mitigated or require no action. Patch status is confirmed by the vendor advisory.