CVE-2026-92368 — Heap-Based Buffer Overflow in TeamViewer Session Recording Playback Leads to Remote Code Execution
TeamViewer Full Client and Host for Linux and macOS prior version 15.82 contain a heap-based buffer overflow vulnerability in the processing of .tvs session recording files. A s…
Published: 2026-09-29 · CVSS: 7.8 · CVSS 3.1
TeamViewer Full Client and Host for Linux and macOS prior version 15.82 contain a heap-based buffer overflow vulnerability in the processing of .tvs session recording files. A size mismatch during decompression of recorded session data can result in out-of-bounds heap writes. By convincing a user to open a specially crafted session recording through the "Play or convert recorded session…" feature, an attacker may achieve arbitrary code execution with the privileges of the current user
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7