TeamViewer DEX Client Integer Underflow Vulnerability Leading to Heap-Based Buffer Overflow

An integer underflow vulnerability has been identified in the UDP command handler of the TeamViewer DEX Client (formerly 1E Client) - Content Distribution Service (NomadBranch.exe) prior to version 26.1 for Windows. This vulnerability allows an adjacent network attacker to trigger a heap-based buffer overflow, causing a denial-of-service condition by crashing the service. The issue arises from the improper handling of specially crafted UDP packets.

Impact

Exploitation of this vulnerability leads to a heap-based buffer overflow, causing the NomadBranch.exe process to crash and creating a denial-of-service condition for the Content Distribution Service.

Remediation

Users are advised to update to TeamViewer DEX Client version 26.1 or the latest available version. Installations with the Content Distribution Service disabled are not affected.