Skip to content
OpenAdvisories
Medium · 6.5 CVE-2026-23569 EUVD-2026-4993GHSA-6hp2-gvhf-wmvw

Out-of-bounds read vulnerability in Content Distribution Service

Published Jan 29, 2026 · Updated Jan 29, 2026 · Assigned by TV

Description

An out-of-bounds read vulnerability in the TeamViewer DEX Client (former 1E Client) - Content Distribution Service (NomadBranch.exe) prior version 26.1 for Windows allows a remote attacker to leak stack memory and cause a denial of service via a crafted request. The leaked stack memory could be used to bypass ASLR remotely and facilitate exploitation of other vulnerabilities on the affected system.

Affected products

VendorProductAffectedFixed
TeamViewer DEX < 26.1 26.1

References