CVE-2026-111585

Integer Overflow in TeamViewer Remote Control Screen Decompression Leading to Heap-Based Buffer Overflow

State: Published
Severity: 8.8 High
Published: Oct 27, 2026
Updated: Oct 27, 2026
Reserved: Oct 16, 2026

Description

An integer overflow in the remote-control screen processing component of TeamViewer clients (Full Client, Portable and Remote Control App) prior to version 15.83 may allow a malicious remote host to cause a denial of service or, depending on the platform, potentially execute arbitrary code with the privileges of the viewer process. Exploitation requires a user to establish a remote-control session to an attacker-controlled or compromised host.

Scores

CVSS	Score	Vector	Source
3.1	8.8 High	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H	TV

Weaknesses

CWE-190 Integer overflow or wraparound

Affected Products

Product	Versions
Full ClientTeamViewer	before 15.83Affected 15.64.0 (Legacy Windows 7 & 8) to before 15.64.10 (Legacy Windows 7 & 8)Affected 14.7.0 (Windows) to before 14.7.48868 (Windows)Affected 14.7.0 (Linux) to before 14.7.48868 (Linux)Affected 14.7.0 (macOS) to before 14.7.48868 (macOS)Affected 13.2.0 (Windows) to before 13.2.36231 (Windows)Affected 13.2.0 (Linux) to before 13.2.154008 (Linux)Affected 13.2.0 (macOS) to before 13.2.154007 (macOS)Affected
PortableTeamViewer	before 15.83Affected 15.64.0 (Legacy Windows 7 & 8) to before 15.64.10 (Legacy Windows 7 & 8)Affected
Remote ControlTeamViewer	before 15.83Affected

References

https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2026-1011/vendor-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.