FreeRDP, an open-source RDP client, contains multiple vulnerabilities affecting heap memory management and audio decoding components. These include denial of service vulnerabilities caused by heap use-after-free during auto-reconnect (CVE-2026-25997), use-after-free (CVE-2026-25952), double free during disconnect (CVE-2026-26986), heap-buffer-overflow in bitmap_cache_put (CVE-2026-29775), out-of-bounds reads in ADPCM decoders due to missing bounds checks (CVE-2026-31885), division-by-zero in ADPCM decoders (CVE-2026-31884), denial of service via crafted audio data (CVE-2026-31883), information disclosure via heap out-of-bounds reads (CVE-2026-33985, CVE-2026-33982), and memory corruption allowing denial of service or arbitrary code execution (CVE-2026-33987). These vulnerabilities affect FreeRDP versions shipped with Red Hat Enterprise Linux 10 prior to 10.2.5. Red Hat has released updated packages to remediate these issues.

The vulnerabilities can cause denial of service conditions through heap use-after-free, double free, heap-buffer-overflow, out-of-bounds reads, and division-by-zero errors. Some vulnerabilities also allow information disclosure via heap memory out-of-bounds reads. Critically, one memory corruption vulnerability (CVE-2026-33987) could enable arbitrary code execution or denial of service. These issues affect the FreeRDP client used for remote desktop connections, potentially impacting the stability and security of affected systems.

Red Hat has released updated FreeRDP packages as part of Red Hat Enterprise Linux 10.2.5 and related Extended Update Support releases. Users should apply these official updates to remediate the vulnerabilities. For detailed update instructions, refer to the Red Hat advisory at https://access.redhat.com/articles/11258. No additional mitigation steps are indicated beyond applying the vendor-provided patches.