CVE-2026-92372
CVE-2026-92372 · Out-of-bounds Write in TeamViewer Full Client for Linux and macOS Allows Remote Code Execution
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
An out-of-bounds write vulnerability in the screen-image decoder of TeamViewer Full Client for Linux and macOS prior to version 15.83 allows a remote attacker to execute arbitrary code by supplying crafted screen-image data during a remote-control session. The vulnerability can also be exploited by persuading a user to open a specially crafted TeamViewer session recording (.tvs). Missing destination bounds checking in the decoder allows crafted screen-image data to cause an out-of-bounds write to the image buffer. Exploitation requires user interaction.
CVSS 8.8 · Alta · EPSS 0,4% · Corrección disponible
- Publicación
- Actualización
Productos y versiones afectados
full client
- Versiones
- ≥ 0, < 15.83: Afectada (custom)
- ≥ 14.7.0 (Linux), < 14.7.48868 (Linux): Afectada (custom)
- ≥ 14.7.0 (macOS), < 14.7.48868 (macOS): Afectada (custom)
- ≥ 13.2.0 (Linux), < 13.2.154008 (Linux): Afectada (custom)
- ≥ 13.2.0 (macOS), < 13.2.154007 (macOS): Afectada (custom)
Actualiza a 13.2.154008 (Linux); Actualiza a 14.7.48868 (macOS)