{ "dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": { "cveId": "CVE-2026-111585", "assignerOrgId": "13430f76-86eb-43b2-a71c-82c956ef31b6", "state": "PUBLISHED", "assignerShortName": "TV", "dateReserved": "2026-10-16T13:05:08.747Z", "datePublished": "2026-10-27T15:19:40.571Z", "dateUpdated": "2026-10-27T15:19:40.571Z" }, "containers": { "cna": { "providerMetadata": { "orgId": "13430f76-86eb-43b2-a71c-82c956ef31b6", "shortName": "TV", "dateUpdated": "2026-10-27T15:19:40.571Z" }, "title": "Integer Overflow in TeamViewer Remote Control Screen Decompression Leading to Heap-Based Buffer Overflow", "problemTypes": [ { "descriptions": [ { "lang": "en", "cweId": "CWE-190", "description": "CWE-190 Integer overflow or wraparound", "type": "CWE" } ] } ], "affected": [ { "vendor": "TeamViewer", "product": "Full Client", "platforms": [ "Windows", "Linux", "MacOS" ], "versions": [ { "status": "affected", "version": "0", "lessThan": "15.83", "versionType": "custom" }, { "status": "affected", "version": "15.64.0 (Legacy Windows 7 & 8)", "lessThan": "15.64.10 (Legacy Windows 7 & 8)", "versionType": "custom" }, { "status": "affected", "version": "14.7.0 (Windows)", "lessThan": "14.7.48868 (Windows)", "versionType": "custom" }, { "status": "affected", "version": "14.7.0 (Linux)", "lessThan": "14.7.48868 (Linux)", "versionType": "custom" }, { "status": "affected", "version": "14.7.0 (macOS)", "lessThan": "14.7.48868 (macOS)", "versionType": "custom" }, { "status": "affected", "version": "13.2.0 (Windows)", "lessThan": "13.2.36231 (Windows)", "versionType": "custom" }, { "status": "affected", "version": "13.2.0 (Linux)", "lessThan": "13.2.154008 (Linux)", "versionType": "custom" }, { "status": "affected", "version": "13.2.0 (macOS)", "lessThan": "13.2.154007 (macOS)", "versionType": "custom" } ], "defaultStatus": "unaffected" }, { "vendor": "TeamViewer", "product": "Portable", "platforms": [ "Windows" ], "versions": [ { "status": "affected", "version": "0", "lessThan": "15.83", "versionType": "custom" }, { "status": "affected", "version": "15.64.0 (Legacy Windows 7 & 8)", "lessThan": "15.64.10 (Legacy Windows 7 & 8)", "versionType": "custom" } ], "defaultStatus": "unaffected" }, { "vendor": "TeamViewer", "product": "Remote Control", "platforms": [ "Android" ], "versions": [ { "status": "affected", "version": "0", "lessThan": "15.83", "versionType": "custom" } ], "defaultStatus": "unaffected" } ], "descriptions": [ { "lang": "en", "value": "An integer overflow in the remote-control\nscreen processing component of TeamViewer clients (Full Client, Portable and Remote\nControl App) prior to version 15.83 may allow a malicious remote host to cause\na denial of service or, depending on the platform, potentially execute\narbitrary code with the privileges of the viewer process. Exploitation requires\na user to establish a remote-control session to an attacker-controlled or\ncompromised host.", "supportingMedia": [ { "type": "text/html", "base64": false, "value": "

An integer overflow in the remote-control\nscreen processing component of TeamViewer clients (Full Client, Portable and Remote\nControl App) prior to version 15.83 may allow a malicious remote host to cause\na denial of service or, depending on the platform, potentially execute\narbitrary code with the privileges of the viewer process. Exploitation requires\na user to establish a remote-control session to an attacker-controlled or\ncompromised host.

" } ] } ], "references": [ { "url": "https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2026-1011/", "tags": [ "vendor-advisory" ] } ], "metrics": [ { "format": "CVSS", "scenarios": [ { "lang": "en", "value": "GENERAL" } ], "cvssV3_1": { "version": "3.1", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH", "baseSeverity": "HIGH", "baseScore": 8.8, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } } ], "solutions": [ { "lang": "en", "value": "Update to the latest available version.", "supportingMedia": [ { "type": "text/html", "base64": false, "value": "Update to the latest available version." } ] } ], "credits": [ { "lang": "en", "value": "Omri Dar", "type": "finder" } ], "source": { "discovery": "UNKNOWN" }, "x_generator": { "engine": "Vulnogram 1.0.5" } } } }