{"id":"CVE-2026-111585","title":"Integer Overflow in TeamViewer Remote Control Screen Decompression Leading to Heap-Based Buffer Overflow","summary":"An integer overflow in the remote-control\nscreen processing component of TeamViewer clients (Full Client, Portable and Remote\nControl App) prior to version 15.83 may allow a malicious remote host to cause\na denial of service or, dependin…","severity":"high","cvss":8.8,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvssSource":"cna","cwe":["CWE-190"],"vendor":"TeamViewer","product":"Full Client","affected":["full_client < 15.83","full_client >= 15.64.0 (Legacy Windows 7 & 8) < 15.64.10 (Legacy Windows 7 & 8)","full_client >= 14.7.0 (Windows) < 14.7.48868 (Windows)","full_client >= 14.7.0 (Linux) < 14.7.48868 (Linux)","full_client >= 14.7.0 (macOS) < 14.7.48868 (macOS)","full_client >= 13.2.0 (Windows) < 13.2.36231 (Windows)","full_client >= 13.2.0 (Linux) < 13.2.154008 (Linux)","full_client >= 13.2.0 (macOS) < 13.2.154007 (macOS)","Portable < 15.83","Portable >= 15.64.0 (Legacy Windows 7 & 8) < 15.64.10 (Legacy Windows 7 & 8)","remote_control < 15.83"],"published":"2026-10-27","updated":"2026-10-27","sourceUpdated":"2026-10-27T15:19:40.571Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-111585","references":[{"url":"https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2026-1011/"}],"tags":["cve.org"],"ingestedAt":"2026-10-27T16:11:59.469Z","slug":"CVE-2026-111585","body":"## Overview\n\nAn integer overflow in the remote-control\nscreen processing component of TeamViewer clients (Full Client, Portable and Remote\nControl App) prior to version 15.83 may allow a malicious remote host to cause\na denial of service or, depending on the platform, potentially execute\narbitrary code with the privileges of the viewer process. Exploitation requires\na user to establish a remote-control session to an attacker-controlled or\ncompromised host.\n\n## Affected\n\n- `full_client < 15.83`\n- `full_client >= 15.64.0 (Legacy Windows 7 & 8) < 15.64.10 (Legacy Windows 7 & 8)`\n- `full_client >= 14.7.0 (Windows) < 14.7.48868 (Windows)`\n- `full_client >= 14.7.0 (Linux) < 14.7.48868 (Linux)`\n- `full_client >= 14.7.0 (macOS) < 14.7.48868 (macOS)`\n- `full_client >= 13.2.0 (Windows) < 13.2.36231 (Windows)`\n- `full_client >= 13.2.0 (Linux) < 13.2.154008 (Linux)`\n- `full_client >= 13.2.0 (macOS) < 13.2.154007 (macOS)`\n- `Portable < 15.83`\n- `Portable >= 15.64.0 (Legacy Windows 7 & 8) < 15.64.10 (Legacy Windows 7 & 8)`\n- `remote_control < 15.83`\n\n## Remediation\n\nUpdate to the latest available version.","depth":"twilight","depthScore":48,"depthScoreParts":{"impact":48.4,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}