CVE-2026-111585: Integer Overflow in TeamViewer Remote Control Screen Decompression Leading to Heap-Based Buffer Overflow
An integer overflow in the remote-control screen processing component of TeamViewer clients (Full Client, Portable and Remote Control App) prior to version 15.83 may allow a malicious remote host to cause a denial of service or, depending on the platform, potentially execute arbitrary code with the privileges of the viewer process. Exploitation requires a user to establish a remote-control session to an attacker-controlled or compromised host.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
TeamViewer Remote Control Appto a version that resolves this vulnerability.Fixed in 15.83
Event History
Frequently Asked Questions
Which deployments are exposed?
TeamViewer Full Client, Portable, and Remote Control App versions prior to 15.83 are affected when they are used to establish remote-control sessions. The vulnerable component runs on the viewer side, so the system initiating or viewing the session is at risk rather than only the remote endpoint.
What does an attacker need to exploit this issue?
A user must establish a remote-control session to a host controlled by an attacker or to a legitimate host that has been compromised. No attacker authentication is required, but user interaction is required to initiate the session.
What is the potential impact if exploitation succeeds?
A malicious remote host may cause the TeamViewer viewer process to crash, resulting in denial of service. Depending on the platform, it may also be possible to execute arbitrary code with the privileges of that viewer process.
What version should be used to remediate the issue?
Update affected TeamViewer clients to version 15.83 or later. This applies to the Full Client, Portable, and Remote Control App.