CVE-2026-92368: Heap-Based Buffer Overflow in TeamViewer Session Recording Playback Leads to Remote Code Execution
TeamViewer Full Client and Host for Linux and macOS prior version 15.82 contain a heap-based buffer overflow vulnerability in the processing of .tvs session recording files. A size mismatch during decompression of recorded session data can result in out-of-bounds heap writes. By convincing a user to open a specially crafted session recording through the "Play or convert recorded session…" feature, an attacker may achieve arbitrary code execution with the privileges of the current user
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
TeamViewer Full Client and Host for Linux and macOSto a version that resolves this vulnerability.Fixed in 15.82
Event History
Frequently Asked Questions
Which systems and users are exposed?
TeamViewer Full Client and Host installations on Linux and macOS are affected if they are running a version earlier than 15.82. Exploitation occurs in the session-recording playback or conversion workflow.
What does an attacker need to do to exploit this issue?
The attacker must provide a specially crafted .tvs session recording and convince a user to open it using the “Play or convert recorded session…” feature. No attacker authentication or existing privileges are required, but user interaction is required.
What level of access could successful exploitation provide?
Successful exploitation may allow arbitrary code execution with the privileges of the user who opens the malicious recording. The stated impact includes compromise of confidentiality, integrity, and availability.
How can I determine whether an installation is affected?
Check whether the system runs TeamViewer Full Client or Host on Linux or macOS and compare its version to 15.82. Versions prior to 15.82 are affected.