A vulnerability in the Deskflow keyboard and mouse sharing application may allow an unauthenticated remote attacker to cause a denial of service condition.

The application contains out of bounds read and improper array index validation flaws. These vulnerabilities can be triggered by an unauthenticated attacker over the network to crash the service.

Successful exploitation results in a denial of service, which disrupts the functionality of the keyboard and mouse sharing capabilities. Given the CVSS score of 8.2, this represents a high severity risk to operational continuity, particularly in environments relying on Deskflow for cross-system input management.

Immediate Action: Update Deskflow to version 1.26.0.299 or later immediately.

Proactive Monitoring: Monitor application logs for unexpected service restarts or crash reports associated with the Deskflow process.

Compensating Controls: Restrict network access to the Deskflow service to trusted internal IP addresses only to reduce the attack surface.

Public Exploit Available: Unknown

The high severity of this vulnerability necessitates an immediate update to the patched version. Organizations should prioritize patching to prevent potential service disruptions caused by exploitation of these memory management flaws.