CVE-2026-65976

Name	CVE-2026-65976
Description	Deskflow is a keyboard and mouse sharing app. From 1.17.0 until continuous build 1.26.0.300, a connected peer can send repeated DCLP DataChunk messages to ClipboardChunk::assemble() in src/lib/deskflow/ClipboardChunk.cpp, causing the server path in src/lib/server/ClientProxy1_6.cpp or client path in src/lib/client/ServerProxy.cpp to append data beyond the DataStart declared size and configured clipboard limit before DataEnd validation, exhausting receiver memory. This issue is fixed in continuous build 1.26.0.300.
Source	CVE (at NVD; CERT, ENISA, LWN, oss-sec, fulldisc, Debian ELTS, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
Debian Bugs	1145169

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
deskflow (PTS)	trixie	1.22.0+dfsg-7	vulnerable
	forky, sid	1.26.0+dfsg-5	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Urgency	Origin	Debian Bugs
deskflow	source	(unstable)	1.26.0+dfsg-4			1145169

Notes

[trixie] - deskflow <no-dsa> (Minor issue)
https://github.com/deskflow/deskflow/security/advisories/GHSA-jf7g-qghg-p54x
Fixed by: https://github.com/deskflow/deskflow/commit/8a535fd5dd48315eaaf6b93d5c7534d0592addef
Fixed by: https://github.com/deskflow/deskflow/commit/bcd3a658fc3b2ad735146fdc9efefa9462d195b7