CVE-2026-92372
Description
An out-of-bounds write vulnerability in the screen-image decoder of TeamViewer Full Client for Linux and macOS prior to version 15.83 allows a remote attacker to execute arbitrary code by supplying crafted screen-image data during a remote-control session. The vulnerability can also be exploited by persuading a user to open a specially crafted TeamViewer session recording (.tvs). Missing destination bounds checking in the decoder allows crafted screen-image data to cause an out-of-bounds write to the image buffer. Exploitation requires user interaction.
How to fix
- TeamViewer Full Client15.83, 14.7.48868 (Linux), 14.7.48868 (macOS), 13.2.154008 (Linux), 13.2.154007 (macOS) or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| TeamViewer Full Client | v < 15.83, 14.7.0 (Linux) ≤ v < 14.7.48868 (Linux), 14.7.0 (macOS) ≤ v < 14.7.48868 (macOS), 13.2.0 (Linux) ≤ v < 13.2.154008 (Linux), 13.2.0 (macOS) ≤ v < 13.2.154007 (macOS) | 15.83, 14.7.48868 (Linux), 14.7.48868 (macOS), 13.2.154008 (Linux), 13.2.154007 (macOS) |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.