CVE-2026-23569 — Out-of-bounds read vulnerability in Content Distribution Service

CVE-2026-23569

Out-of-bounds read vulnerability in Content Distribution Service PUBLISHED

Description (CNA)

An out-of-bounds read vulnerability in the TeamViewer DEX Client (former 1E Client) - Content Distribution Service (NomadBranch.exe) prior version 26.1 for Windows allows a remote attacker to leak stack memory and cause a denial of service via a crafted request. The leaked stack memory could be used to bypass ASLR remotely and facilitate exploitation of other vulnerabilities on the affected system.

Affected (CNA)

Vendor / product	Versions
TeamViewer / DEX	affected 0 before 26.1

CWE

CWE-125

References

https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2026-1001/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.