CVE-2026-111585 PUBLISHED

Integer Overflow in TeamViewer Remote Control Screen Decompression Leading to Heap-Based Buffer Overflow

Assigner: TV
Reserved: 16.10.2026 Published: 27.10.2026 Updated: 27.10.2026

An integer overflow in the remote-control screen processing component of TeamViewer clients (Full Client, Portable and Remote Control App) prior to version 15.83 may allow a malicious remote host to cause a denial of service or, depending on the platform, potentially execute arbitrary code with the privileges of the viewer process. Exploitation requires a user to establish a remote-control session to an attacker-controlled or compromised host.

Metrics

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS Score: 8.8

Product Status

Vendor TeamViewer
Product Full Client
Versions Default: unaffected
  • affected from 0 to 15.83 (excl.)
  • affected from 15.64.0 (Legacy Windows 7 & 8) to 15.64.10 (Legacy Windows 7 & 8) (excl.)
  • affected from 14.7.0 (Windows) to 14.7.48868 (Windows) (excl.)
  • affected from 14.7.0 (Linux) to 14.7.48868 (Linux) (excl.)
  • affected from 14.7.0 (macOS) to 14.7.48868 (macOS) (excl.)
  • affected from 13.2.0 (Windows) to 13.2.36231 (Windows) (excl.)
  • affected from 13.2.0 (Linux) to 13.2.154008 (Linux) (excl.)
  • affected from 13.2.0 (macOS) to 13.2.154007 (macOS) (excl.)
Vendor TeamViewer
Product Portable
Versions Default: unaffected
  • affected from 0 to 15.83 (excl.)
  • affected from 15.64.0 (Legacy Windows 7 & 8) to 15.64.10 (Legacy Windows 7 & 8) (excl.)
Vendor TeamViewer
Product Remote Control
Versions Default: unaffected
  • affected from 0 to 15.83 (excl.)

Solutions

Update to the latest available version.

Credits

  • Omri Dar finder

References

Problem Types

  • CWE-190 Integer overflow or wraparound CWE