Uncontrolled Speculative Memory Allocation in RustDesk: CVE-2026-73108
CVE-2026-73108 is a high-severity vulnerability in RustDesk versions before 1.4.7, allowing unauthenticated attackers to cause memory exhaustion and denial of service via uncontrolled speculative memory allocation in BytesCodec. The vulnerability has a CVSS score of 7.5 and is not actively exploited. Affected versions are before 1.4.7, and the fix caps header-triggered speculative preallocation at 256 KiB. Immediate patching or upgrading to version 1.4.7 or later is recommended.