---
id: "CVE-2026-92372"
kind: "vulnerability"
aliases: ["CVE-2026-92372"]
title: "TeamViewer Full Client: screen decoder flaw lets crafted image run code"
severity: "high"
cvss: 8.8
epss: null
exploited: false
status: "open"
category: "other"
products: []
ecosystems: []
tags: ["linux", "macos", "other", "remote-desktop", "teamviewer"]
not_affected_if: ["no-teamviewer-installed", "windows-only"]
published_at: "2026-10-27T16:17:31+00:00"
first_seen_at: "2026-10-27T16:33:07+00:00"
updated_at: "2026-10-27T16:34:03+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-92372", "first_seen_at": "2026-10-27T16:33:07+00:00"}]
---

# TeamViewer Full Client: screen decoder flaw lets crafted image run code

TeamViewer Full Client for Linux and macOS before 15.83 has an out-of-bounds write in its screen-image decoder. A remote attacker who sends crafted screen data during a session, or a user who opens a crafted .tvs session recording, can execute arbitrary code.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Run `teamviewer --version` on Linux or check the app version under TeamViewer > About on macOS
- Check whether any .tvs session recordings from untrusted sources are on the machine

## Fix

- Update TeamViewer Full Client for Linux and macOS to `15.83` or later
- Do not open .tvs session recordings from unknown sources until updated

## Timeline

- 2026-10-27T16:33:07+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-92372

## From the sources

An out-of-bounds write vulnerability in the
screen-image decoder of TeamViewer Full Client for Linux and macOS prior to
version 15.83 allows a remote attacker to execute arbitrary code by supplying
crafted screen-image data during a remote-control session. The vulnerability
can also be exploited by persuading a user to open a specially crafted
TeamViewer session recording (.tvs). Missing destination bounds checking in the
decoder allows crafted screen-image data to cause an out-of-bounds write to the
image buffer. Exploitation requires user interaction.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_