Product:
TeamViewer DEX Client
Summary
An out-of-bounds read vulnerability in the TeamViewer DEX Client allows a remote attacker to leak stack memory and cause a denial of service via a crafted request. This vulnerability affects versions prior to 26.1 for Windows. The leaked stack memory could be used to bypass ASLR remotely and facilitate exploitation of other vulnerabilities on the affected system.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 6.5 | CVE-2026-23569 |
Exploitation
To exploit this vulnerability, an attacker must send a specially crafted request to the TeamViewer DEX Client. This request can trigger an out-of-bounds read, allowing the attacker to leak sensitive stack memory. By obtaining this memory, the attacker may be able to bypass ASLR protections and exploit other vulnerabilities present on the system.
Affected Products
- TeamViewer DEX Client (former 1E Client) – Vulnerable prior to version 26.1 for Windows
Mitigation
To mitigate this vulnerability, users should upgrade to the latest version of the TeamViewer DEX Client. Regularly applying security updates and patches can help protect against known vulnerabilities. Additionally, monitoring network traffic for unusual requests can help detect potential exploitation attempts.