Skip to content
OpenAdvisories
Medium · 5.4 CVE-2026-23568 EUVD-2026-4992GHSA-jffw-mmpf-fpx4

Out-of-bounds read vulnerability in Content Distribution Service

Published Jan 29, 2026 · Updated Jan 29, 2026 · Assigned by TV

Description

An out-of-bounds read vulnerability in the TeamViewer DEX Client (former 1E Client) - Content Distribution Service (NomadBranch.exe) prior version 26.1 for Windows allows an attacker on the adjacent network to cause information disclosure or denial-of-service via a special crafted packet. The leaked memory could be used to bypass ASLR and facilitate further exploitation.

Affected products

VendorProductAffectedFixed
TeamViewer DEX < 26.1 26.1

References