CVE-2026-65976: Deskflow: Clipboard receiver can accumulate data beyond Deskflow's configured clipboard size limit
Deskflow is a keyboard and mouse sharing app. From 1.17.0 until continuous build 1.26.0.300, a connected peer can send repeated DCLP DataChunk messages to ClipboardChunk::assemble() in src/lib/deskflow/ClipboardChunk.cpp, causing the server path in src/lib/server/ClientProxy16.cpp or client path in src/lib/client/ServerProxy.cpp to append data beyond the DataStart declared size and configured clipboard limit before DataEnd validation, exhausting receiver memory. This issue is fixed in continuous build 1.26.0.300.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Deskflowto a version that resolves this vulnerability.Fixed in 1.26.0.300
Event History
Frequently Asked Questions
What is the severity of CVE-2026-65976?
The severity of CVE-2026-65976 is classified as medium with a score of 6.5.
How do I fix CVE-2026-65976?
To fix CVE-2026-65976, update Deskflow to a version later than 1.26.0.300.
What type of vulnerability is CVE-2026-65976?
CVE-2026-65976 is a clipboard data handling vulnerability in the Deskflow application.
Who is affected by CVE-2026-65976?
CVE-2026-65976 affects users of Deskflow from versions 1.17.0 to 1.26.0.300.
What can an attacker do with CVE-2026-65976?
An attacker can exploit CVE-2026-65976 to send excessive clipboard data, exceeding Deskflow's configured size limit.