TeamViewer flaw CVE-2026-111585 lets malicious hosts run code on technicians' machines
- Severity
- High
- Sources
- 2
What happened
CVE-2026-111585 (CVSS 8.8, rated High by TeamViewer, bulletin TV-2026-1011) is a 32-bit integer overflow in the DisplayParams handling of the viewer, which allocates CBitmapBuffer too small for the declared screen size. Remedio researcher Omri Dar reports that a malicious host can force bitmap updates by refusing AV1 and H.264, then write out-of-bounds because rectangles are validated against declared dimensions rather than allocation, enabling heap corruption and code execution with viewer process permissions. Affected versions are Full Client before 15.83 (Windows, Linux, macOS), Windows Portable and Android Remote Control. Defenders should update to 15.83 or the latest release, apply the matching maintenance build for legacy deployments, and check portable copies.
For security analysts · Written by AI from 2 sources · Wrong?
What to do
- Update TeamViewer Full Client to version 15.83 or the latest available release.
- Install the matching fixed maintenance build listed in bulletin TV-2026-1011 for legacy deployments.
- Check portable copies and Android Remote Control installs, which are also affected.
- Avoid connecting to untrusted or unknown remote hosts until the viewer is updated.
Written by AI from the sources, checked against them
Full story timeline · 2 updates
Who reported · 2 outlets
Who and what is in it
Products