CVE-2026-23568 — Out-of-bounds read vulnerability in Content Distribution Service

CVE-2026-23568

Out-of-bounds read vulnerability in Content Distribution Service PUBLISHED

Description (CNA)

An out-of-bounds read vulnerability in the TeamViewer DEX Client (former 1E Client) - Content Distribution Service (NomadBranch.exe) prior version 26.1 for Windows allows an attacker on the adjacent network to cause information disclosure or denial-of-service via a special crafted packet. The leaked memory could be used to bypass ASLR and facilitate further exploitation.

Affected (CNA)

Vendor / product	Versions
TeamViewer / DEX	affected 0 before 26.1

CWE

CWE-125

References

https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2026-1001/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.