RHSA-2026:16866MediumCVSS 7.3

Red Hat Security Advisory: freerdp security update

Published
May 13, 2026
Last Modified
July 12, 2026

🔗 CVE IDs covered (8)

CVE-2026-27951 →CVE-2026-29775 →CVE-2026-31883 →CVE-2026-31884 →CVE-2026-31885 →CVE-2026-33985 →CVE-2026-25952 →CVE-2026-26986 →

📋 Description

CVE-2026-25952 — freerdp: FreeRDP: Denial of service due to use-after-free vulnerability CVE-2026-26986 — freerdp: FreeRDP: Denial of Service via double free vulnerability during disconnect CVE-2026-27951 — freerdp: FreeRDP: Denial of Service via endless blocking loop in Stream_EnsureCapacity CVE-2026-29775 — freerdp: FreeRDP has a heap-buffer-overflow in bitmap_cache_put via OOB cacheId CVE-2026-31883 — freerdp: FreeRDP: Denial of Service via crafted audio data in RDP CVE-2026-31884 — freerdp: FreeRDP has a division-by-zero in ADPCM decoders when nBlockAlign is 0 CVE-2026-31885 — freerdp: FreeRDP has an out-of-bounds read in ADPCM decoders due to missing predictor/step_index bounds checks CVE-2026-33985 — FreeRDP: FreeRDP: Information disclosure via heap memory out of bounds read

🔗 References (11)