CVE-2026-121386

Отчет

This vulnerability is rated as an Important impact for Red Hat products because an untrusted remote desktop host or network intermediary can terminate the client session unexpectedly without prior authentication. Although this defect causes application termination rather than remote code execution, it directly impacts the availability of user sessions in enterprise environments. Exploitation requires an established connection to a malicious RDP endpoint or interception by an adversary on the network path processing shared clipboard content.

Меры по смягчению последствий

Disable clipboard redirection for RDP connections. When launching sessions with the xfreerdp command-line utility, explicitly disable the clipboard channel:

When connecting via graphical clients, disable clipboard synchronization within the respective connection profile preferences. Caveats: Disabling clipboard redirection prevents transferring text, images, or files between the local system and the remote session. Warning: Changes apply to new connections; any active RDP sessions must be disconnected and restarted for the setting to take effect. --- CME Mitigation Guidance (2026-11-04) --- Disclaimer: The following mitigation solutions are provided as a courtesy, pending the application of an official patch. This content was generated utilizing AI tools in conjunction with data from https://cmetaxonomy.org. Customers are advised to independently evaluate and test these temporary mitigations within their own infrastructure. The highest-value action is to disable clipboard redirection in FreeRDP client connections to prevent processing untrusted image buffers through WinPR: upgrade to FreeRDP 3.32.2 (or the fixed Freerdp builds), which install setjmp error handlers for libpng and libjpeg in winpr_read_png_from_buffer, winpr_convert_from_jpeg, and winpr_convert_to_jpeg, closing all 2 injection vectors (malformed PNG clipboard payload, truncated JPEG clipboard payload). Until patched, this is a concern on FreeRDP client sessions with clipboard redirection enabled connecting across untrusted networks or to untrusted RDP servers, so Disable clipboard redirection by using the -clipboard flag in xfreerdp or disabling clipboard synchronization in graphical connection profiles, then disconnect and restart active sessions. These controls limit blast radius and contain exploitation, but they do not fix the underlying missing image library error-handling defect — apply the upstream patch to fully remediate.