CVE-2026-92368
Received Received - Intake

Heap-based Buffer Overflow in TeamViewer Client and Host

Publication date: 2026-09-29

Last updated on: 2026-09-29

Assigner: TeamViewer Germany GmbH

Description
TeamViewer Full Client and Host for Linux and macOS prior version 15.82 contain a heap-based buffer overflow vulnerability in the processing of .tvs session recording files. A size mismatch during decompression of recorded session data can result in out-of-bounds heap writes. By convincing a user to open a specially crafted session recording through the "Play or convert recorded session…" feature, an attacker may achieve arbitrary code execution with the privileges of the current user

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-29
Last Modified
2026-09-29
Generated
2026-09-29
AI Q&A
2026-09-29
EPSS Evaluated
N/A
NVD
CVE-2026-92368
EUVD
EUVD-2026-89021

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
teamviewer full_client to 15.82 (exc)
teamviewer host to 15.82 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-122 A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

TeamViewer Full Client and Host for Linux and macOS before version 15.82 have a heap-based buffer overflow flaw. This occurs when processing .tvs session recording files due to a size mismatch during decompression of recorded session data, leading to out-of-bounds heap writes.

Detection Guidance

This vulnerability involves a heap-based buffer overflow in TeamViewer's handling of .tvs session recording files. Detection requires checking for outdated TeamViewer versions on Linux or macOS systems. Verify installed versions using package managers like 'dpkg -l | grep teamviewer' for Debian-based systems or 'rpm -qa | grep teamviewer' for RPM-based systems. Compare against version 15.82 or later.

Impact Analysis

An attacker could trick you into opening a specially crafted session recording file. This could allow them to execute arbitrary code on your system with the same privileges as your current user account.

Compliance Impact

This vulnerability could lead to unauthorized code execution on systems handling sensitive data, potentially violating GDPR or HIPAA by exposing personal or health information. Unauthorized access risks data breaches, which are major compliance concerns under these regulations.

Mitigation Strategies

Update TeamViewer Full Client and Host for Linux and macOS to version 15.82 or later to address the heap-based buffer overflow vulnerability in .tvs session recording file processing.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-92368. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart