CVE-2026-65976

Name of the Vulnerable Software and Affected Versions Deskflow versions 1.17.0 through 1.26.0.299

Description A connected peer can send repeated DCLP DataChunk messages to the ClipboardChunk::assemble() function. This causes the server path in src/lib/server/ClientProxy1 6.cpp or the client path in src/lib/client/ServerProxy.cpp to append data exceeding the DataStart declared size and the configured clipboard limit before DataEnd validation occurs, leading to receiver memory exhaustion.

Recommendations Update to continuous build 1.26.0.300.