Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2026-92372

Out-of-bounds Write in TeamViewer Full Client for Linux and macOS Allows Remote Code Execution

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
TV

Description

An out-of-bounds write vulnerability in the screen-image decoder of TeamViewer Full Client for Linux and macOS prior to version 15.83 allows a remote attacker to execute arbitrary code by supplying crafted screen-image data during a remote-control session. The vulnerability can also be exploited by persuading a user to open a specially crafted TeamViewer session recording (.tvs). Missing destination bounds checking in the decoder allows crafted screen-image data to cause an out-of-bounds write to the image buffer. Exploitation requires user interaction.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

TeamViewer Full Client

Default version status: unaffected

  • 0 to < 15.83affected
  • 14.7.0 (Linux) to < 14.7.48868 (Linux)affected
  • 14.7.0 (macOS) to < 14.7.48868 (macOS)affected
  • 13.2.0 (Linux) to < 13.2.154008 (Linux)affected
  • 13.2.0 (macOS) to < 13.2.154007 (macOS)affected

References