https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T06:54:48.754358+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-292980 EUVD-2026-292980 2026-10-05T06:54:48.808309+00:00 EUVD-2026-292980 https://cve.radiocsirt.org/vuln/fkie_cve-2026-41476 fkie_cve-2026-41476 2026-10-05T06:54:48.808347+00:00

Deskflow is a keyboard and mouse sharing app. Prior to 1.26.0.138, a remote memory-safety vulnerability in Deskflow's clipboard deserialization allows a connected peer to trigger an out-of-bounds read by sending a malformed clipboard update. The issue is in the implementation of src/lib/deskflow/IClipboard.cpp. This is reachable because ClipboardChunk::assemble() in src/lib/deskflow/ClipboardChunk.cpp validates only the outer clipboard transfer size. It does not validate the internal structure of the serialized clipboard blob, so malformed inner lengths reach IClipboard::unmarshall() unchanged. This vulnerability is fixed in 1.26.0.138.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-41476 UBUNTU-CVE-2026-41476 2026-10-05T06:54:48.808384+00:00

Affected: Ubuntu:25.10: deskflow, Ubuntu:26.04:LTS: deskflow

Deskflow is a keyboard and mouse sharing app. Prior to 1.26.0.138, a remote memory-safety vulnerability in Deskflow's clipboard deserialization allows a connected peer to trigger an out-of-bounds read by sending a malformed clipboard update. The issue is in the implementation of src/lib/deskflow/IClipboard.cpp. This is reachable because ClipboardChunk::assemble() in src/lib/deskflow/ClipboardChunk.cpp validates only the outer clipboard transfer size. It does not validate the internal structure of the serialized clipboard blob, so malformed inner lengths reach IClipboard::unmarshall() unchanged. This vulnerability is fixed in 1.26.0.138.