CVE-2026-41476

Deskflow is a keyboard and mouse sharing app. Prior to 1.26.0.138, a remote memory-safety vulnerability in Deskflow's clipboard deserialization allows a connected peer to trigger an out-of-bounds read by sending a malformed clipboard update. The issue is in the implementation of...

CVE-2026-41476

Deskflow is affected by a remote memory-safety vulnerability in clipboard deserialization prior to version 1.26.0.138. The flaw resides in IClipboard.cpp and ClipboardChunk.cpp where ClipboardChunk::assemble() validates only the outer transfer size, allowing malformed inner clipboard blob lengths...