Product:
TeamViewer DEX Client
Summary
An out-of-bounds read vulnerability in the TeamViewer DEX Client – Content Distribution Service (NomadBranch.exe) prior to version 26.1 for Windows allows an attacker on the adjacent network to cause information disclosure or denial-of-service via a specially crafted packet. The leaked memory could be used to bypass ASLR and facilitate further exploitation.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.4 | CVE-2026-23568 |
Exploitation
To exploit this vulnerability, an attacker on the adjacent network can send a specially crafted packet to the TeamViewer DEX Client. This packet can trigger an out-of-bounds read, leading to information disclosure or a denial-of-service condition. By analyzing the leaked memory, the attacker may also find ways to bypass Address Space Layout Randomization (ASLR), which could enable further attacks.
Affected Products
- TeamViewer DEX Client – Vulnerable prior to version 26.1 for Windows, allowing for potential information disclosure and denial-of-service.
Mitigation
To mitigate this vulnerability, users should upgrade to the latest version of the TeamViewer DEX Client. Regularly applying security updates and patches can help protect against known vulnerabilities and reduce the risk of exploitation.