EUVD-2026-60466Severity by source
AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Network vector with established peer session as prerequisite (UI:R, PR:N); pure availability DoS with confirmed no confidentiality or integrity impact.
Primary rating from Vendor (GitHub_M).
CVSS VectorVendor: GitHub_M
Lifecycle Timeline
3DescriptionCVE.org
Deskflow is a keyboard and mouse sharing app. From 1.17.0 until continuous build 1.26.0.300, a connected peer can send repeated DCLP DataChunk messages to ClipboardChunk::assemble() in src/lib/deskflow/ClipboardChunk.cpp, causing the server path in src/lib/server/ClientProxy1_6.cpp or client path in src/lib/client/ServerProxy.cpp to append data beyond the DataStart declared size and configured clipboard limit before DataEnd validation, exhausting receiver memory. This issue is fixed in continuous build 1.26.0.300.
AnalysisAI
Memory exhaustion in Deskflow's clipboard protocol subsystem allows a connected peer to crash the receiving process by flooding it with DataChunk messages that accumulate beyond the declared DataStart size before any DataEnd validation occurs. Versions 1.17.0 through continuous build 1.26.0.299 are affected on both server (ClientProxy1_6.cpp) and client (ServerProxy.cpp) code paths. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | The attacker must have completed Deskflow peer session establishment - the target must be running Deskflow with its sharing port network-reachable and must have accepted the attacker's connection via the standard Deskflow handshake. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The provided CVSS 3.1 score of 6.5 Medium (AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) accurately characterises this vulnerability: it is network-reachable with low attack complexity and no required privileges on the target system, but the scope is limited to availability only and UI:R encodes the requirement for an established peer session rather than arbitrary internet access. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Upgrade to Deskflow continuous build 1.26.0.300 or later, which enforces per-chunk size limits and aborts clipboard assembly immediately on any exceedance; the fix is tracked in commits 8a535fd5dd48315eaaf6b93d5c7534d0592addef and bcd3a658fc3b2ad735146fdc9efefa9462d195b7 and detailed in the vendor advisory at https://github.com/deskflow/deskflow/security/advisories/GHSA-jf7g-qghg-p54x. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Out-of-bounds memory read in Deskflow clients prior to continuous build 1.26.0.299 allows a network-reachable malicious
Out-of-bounds read in Deskflow's client-side `ServerProxy::setOptions()` allows a malicious Deskflow server to crash any
Local privilege escalation in Deskflow (all versions up to 1.20.0 stable and 1.26.0.134 continuous) allows any low-privi
Remote denial of service in Deskflow servers (versions prior to 1.26.0.167) running with TLS enabled - the default - let
Out-of-bounds memory read in Deskflow's clipboard deserialization allows authenticated remote peers to crash the applica
Same weakness CWE-400 – Uncontrolled Resource Consumption
View allSame technique Denial Of Service
View allVendor StatusVendor
SUSE
Severity: ModerateShare
External POC / Exploit Code
Leaving vuln.today