This advisory covers eight distinct vulnerabilities in FreeRDP, including CVE-2026-25952 (use-after-free leading to denial of service), CVE-2026-26986 (double free during disconnect causing denial of service), CVE-2026-27951 (endless blocking loop causing denial of service), CVE-2026-29775 (heap-buffer-overflow via out-of-bounds cacheId), CVE-2026-31885 (out-of-bounds read in ADPCM decoders due to missing bounds checks), CVE-2026-31884 (division-by-zero in ADPCM decoders when nBlockAlign is zero), CVE-2026-31883 (denial of service via crafted audio data), and CVE-2026-33985 (information disclosure via heap memory out-of-bounds read). These vulnerabilities affect the freerdp packages in Red Hat Enterprise Linux 8.4 Extended Life Cycle Long Life and AUS variants. The issues can cause denial of service or information disclosure when using the xfreerdp client to connect to RDP servers. Red Hat has issued patches to address these vulnerabilities.

The vulnerabilities can lead to denial of service conditions through memory corruption issues such as use-after-free, double free, blocking loops, and crafted audio data processing. Additionally, heap-buffer-overflow and out-of-bounds reads can cause memory corruption or crashes. One vulnerability allows information disclosure via out-of-bounds heap memory reads. These issues could disrupt RDP client operations or expose sensitive memory contents. No known exploits in the wild have been reported at this time.

Red Hat has released updated freerdp packages for Red Hat Enterprise Linux 8.4 Extended Life Cycle Long Life and AUS variants that address these vulnerabilities. Users should apply these official patches as detailed in the Red Hat advisory RHSA-2026:19811. For instructions on applying the update, refer to https://access.redhat.com/articles/11258. No additional mitigation steps are indicated by the vendor.