diff --git a/src/servers/app/drawing/interface/remote/RemoteEventStream.cpp b/src/servers/app/drawing/interface/remote/RemoteEventStream.cpp
index c04a25af3b..11a6a0c9ec 100644
--- a/src/servers/app/drawing/interface/remote/RemoteEventStream.cpp
+++ b/src/servers/app/drawing/interface/remote/RemoteEventStream.cpp
@@ -169,6 +169,9 @@ RemoteEventStream::EventReceived(RemoteMessage& message)
 			if (message.Read(numBytes) != B_OK)
 				break;
 
+			if (numBytes > 1000)
+				break;
+
 			char* bytes = (char*)malloc(numBytes + 1);
 			if (bytes == NULL)
 				break;