PT-2026-76823 · Deskflow · Deskflow
CVE-2026-65976
·
Published
2026-08-17
·
Updated
2026-08-18
CVSS v3.1
6.5
Medium
| Vector | AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Deskflow versions 1.17.0 through 1.26.0.299
Description
A connected peer can send repeated DCLP DataChunk messages to the
ClipboardChunk::assemble() function. This causes the server path in src/lib/server/ClientProxy1 6.cpp or the client path in src/lib/client/ServerProxy.cpp to append data exceeding the DataStart declared size and the configured clipboard limit before DataEnd validation occurs, leading to receiver memory exhaustion.Recommendations
Update to continuous build 1.26.0.300.
Exploit
Fix
Resource Exhaustion
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Deskflow