Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2026-111585

Integer Overflow in TeamViewer Remote Control Screen Decompression Leading to Heap-Based Buffer Overflow

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
TV

Description

An integer overflow in the remote-control screen processing component of TeamViewer clients (Full Client, Portable and Remote Control App) prior to version 15.83 may allow a malicious remote host to cause a denial of service or, depending on the platform, potentially execute arbitrary code with the privileges of the viewer process. Exploitation requires a user to establish a remote-control session to an attacker-controlled or compromised host.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

TeamViewer Full Client

Default version status: unaffected

  • 0 to < 15.83affected
  • 15.64.0 (Legacy Windows 7 & 8) to < 15.64.10 (Legacy Windows 7 & 8)affected
  • 14.7.0 (Windows) to < 14.7.48868 (Windows)affected
  • 14.7.0 (Linux) to < 14.7.48868 (Linux)affected
  • 14.7.0 (macOS) to < 14.7.48868 (macOS)affected
  • 13.2.0 (Windows) to < 13.2.36231 (Windows)affected
  • 13.2.0 (Linux) to < 13.2.154008 (Linux)affected
  • 13.2.0 (macOS) to < 13.2.154007 (macOS)affected

TeamViewer Portable

Default version status: unaffected

  • 0 to < 15.83affected
  • 15.64.0 (Legacy Windows 7 & 8) to < 15.64.10 (Legacy Windows 7 & 8)affected

TeamViewer Remote Control

Default version status: unaffected

  • 0 to < 15.83affected

References