CVE-2026-23567 — Integer underflow in Content Distribution Service UDP handler

CVE-2026-23567

Integer underflow in Content Distribution Service UDP handler PUBLISHED

Description (CNA)

An integer underflow in the UDP command handler of the TeamViewer DEX Client (former 1E Client) - Content Distribution Service (NomadBranch.exe) prior version 26.1 for Windows allows an adjacent network attacker to trigger a heap-based buffer overflow and cause a denial-of-service (service crash) via specially crafted UDP packets.

Affected (CNA)

Vendor / product	Versions
TeamViewer / DEX	affected 0 before 26.1

CWE

CWE-122

References

https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2026-1001/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.