CVE-2026-92368

Summary

TeamViewer Full Client and Host for Linux and macOS prior version 15.82 contain a heap-based buffer overflow vulnerability in the processing of .tvs session recording files. A size mismatch during decompression of recorded session data can result in out-of-bounds heap writes. By convincing a user to open a specially crafted session recording through the "Play or convert recorded session…" feature, an attacker may achieve arbitrary code execution with the privileges of the current user

Affected Software

VendorProductVersion RangeStatus
TeamViewerFull Client15.70 < 15.82affected
TeamViewerHost15.70 < 15.82affected

Weaknesses

  • CWE-122: CWE-122 Heap-based buffer overflow

References