{"id":"CVE-2026-92372","title":"Out-of-bounds Write in TeamViewer Full Client for Linux and macOS Allows Remote Code Execution","summary":"An out-of-bounds write vulnerability in the\nscreen-image decoder of TeamViewer Full Client for Linux and macOS prior to\nversion 15.83 allows a remote attacker to execute arbitrary code by supplying\ncrafted screen-image data during a remo…","severity":"high","cvss":8.8,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvssSource":"cna","cwe":["CWE-123"],"vendor":"TeamViewer","product":"Full Client","affected":["full_client < 15.83","full_client >= 14.7.0 (Linux) < 14.7.48868 (Linux)","full_client >= 14.7.0 (macOS) < 14.7.48868 (macOS)","full_client >= 13.2.0 (Linux) < 13.2.154008 (Linux)","full_client >= 13.2.0 (macOS) < 13.2.154007 (macOS)"],"published":"2026-10-27","updated":"2026-10-27","sourceUpdated":"2026-10-27T15:08:28.439Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-92372","references":[{"url":"https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2026-1011/"}],"tags":["cve.org"],"ingestedAt":"2026-10-27T16:11:59.462Z","slug":"CVE-2026-92372","body":"## Overview\n\nAn out-of-bounds write vulnerability in the\nscreen-image decoder of TeamViewer Full Client for Linux and macOS prior to\nversion 15.83 allows a remote attacker to execute arbitrary code by supplying\ncrafted screen-image data during a remote-control session. The vulnerability\ncan also be exploited by persuading a user to open a specially crafted\nTeamViewer session recording (.tvs). Missing destination bounds checking in the\ndecoder allows crafted screen-image data to cause an out-of-bounds write to the\nimage buffer. Exploitation requires user interaction.\n\n## Affected\n\n- `full_client < 15.83`\n- `full_client >= 14.7.0 (Linux) < 14.7.48868 (Linux)`\n- `full_client >= 14.7.0 (macOS) < 14.7.48868 (macOS)`\n- `full_client >= 13.2.0 (Linux) < 13.2.154008 (Linux)`\n- `full_client >= 13.2.0 (macOS) < 13.2.154007 (macOS)`\n\n## Remediation\n\nUpdate to the latest available version.","depth":"twilight","depthScore":48,"depthScoreParts":{"impact":48.4,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}