VulnSocial

CVE-2026-73108Disclosure

LOWCVSS 8.7 · HIGH

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

RustDesk versions before 1.4.7 contain an uncontrolled speculative memory allocation vulnerability in BytesCodec. Before authentication, the decoder trusts the payload length encoded in a four-byte frame header and reserves that amount before receiving the payload. A crafted header can request up to 1,073,741,823 bytes of capacity, allowing unauthenticated attackers to use concurrent TCP connections to cause memory exhaustion and denial of service. The fix caps header-triggered speculative preallocation at 256 KiB.

Back to dashboard
0.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-770

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

  • 2 mentions across 1 observed day

What's happening

  • Technical details provided in 2 signals
  • Disclosure: 2 classified signals
  • 2 total mentions across 1 day

Deep dive

Activity timeline2 mentions / 1d
01122Mentions · 2026-08-30: 2Technical Details · 2026-08-30: 208-30
Signal classification1 categories
Disclosure
2100.0%
Referenced assets2 URLs
By indicator
Full discourse2 posts
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2026-73108 RustDesk versions before 1.4.7 contain an uncontrolled speculative memory allocation vulnerability in BytesCodec. Before authentication, the decoder trusts the payloa… https://www.cve.org/CVERecord?id=CVE-2026-73108 ----- Traducción: CVE-2026-73108 Rus… https://infoflow.cloud`

    Post summary

    The tweet announces CVE‑2026‑73108 as an uncontrolled speculative memory allocation flaw in RustDesk’s BytesCodec affecting versions before 1.4.7, with no evidence of exploitation or available patch details.

    0000050
    102 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-73108 RustDesk versions before 1.4.7 contain an uncontrolled speculative memory allocation vulnerability in BytesCodec. Before authentication, the decoder trusts the payloa… https://www.cve.org/CVERecord?id=CVE-2026-73108

    Post summary

    CVE-2026-73108 is a memory‑allocation vulnerability in RustDesk’s BytesCodec that occurs before authentication; the CVE record supplies technical details but no exploitation or mitigation information is included.

    00000939
    58.0K followersView on X

Explore more

Back to dashboard