{"schema":"threatline.record/2","record":{"id":"CVE-2026-92372","aliases":[],"summary":"Out-of-bounds Write in TeamViewer Full Client for Linux and macOS Allows Remote Code Execution","details":"An out-of-bounds write vulnerability in the\nscreen-image decoder of TeamViewer Full Client for Linux and macOS prior to\nversion 15.83 allows a remote attacker to execute arbitrary code by supplying\ncrafted screen-image data during a remote-control session. The vulnerability\ncan also be exploited by persuading a user to open a specially crafted\nTeamViewer session recording (.tvs). Missing destination bounds checking in the\ndecoder allows crafted screen-image data to cause an out-of-bounds write to the\nimage buffer. Exploitation requires user interaction.","categories":["Unclassified"],"product":"Full Client","vendor":"TeamViewer","ecosystem":null,"affected_ranges":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-92372","source_modified_at":"2026-10-27T15:08:28.439Z","fetched_at":"2026-10-27T16:27:21.584480Z","product":"Full Client","vendor":"TeamViewer","versions":[{"status":"affected","version":"0","lessThan":"15.83","versionType":"custom"},{"status":"affected","version":"14.7.0 (Linux)","lessThan":"14.7.48868 (Linux)","versionType":"custom"},{"status":"affected","version":"14.7.0 (macOS)","lessThan":"14.7.48868 (macOS)","versionType":"custom"},{"status":"affected","version":"13.2.0 (Linux)","lessThan":"13.2.154008 (Linux)","versionType":"custom"},{"status":"affected","version":"13.2.0 (macOS)","lessThan":"13.2.154007 (macOS)","versionType":"custom"}],"defaultStatus":"unaffected"}],"fixed_versions":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-92372","source_modified_at":"2026-10-27T15:08:28.439Z","fetched_at":"2026-10-27T16:27:21.584480Z","package":{"name":"Full Client","ecosystem":null},"version":"15.83","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-92372","source_modified_at":"2026-10-27T15:08:28.439Z","fetched_at":"2026-10-27T16:27:21.584480Z","package":{"name":"Full Client","ecosystem":null},"version":"14.7.48868 (Linux)","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-92372","source_modified_at":"2026-10-27T15:08:28.439Z","fetched_at":"2026-10-27T16:27:21.584480Z","package":{"name":"Full Client","ecosystem":null},"version":"14.7.48868 (macOS)","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-92372","source_modified_at":"2026-10-27T15:08:28.439Z","fetched_at":"2026-10-27T16:27:21.584480Z","package":{"name":"Full Client","ecosystem":null},"version":"13.2.154008 (Linux)","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-92372","source_modified_at":"2026-10-27T15:08:28.439Z","fetched_at":"2026-10-27T16:27:21.584480Z","package":{"name":"Full Client","ecosystem":null},"version":"13.2.154007 (macOS)","basis":"first unaffected version stated in the CVE record"}],"cvss":8.8,"severity":"High","kev":{"listed":false},"epss":{"probability":null,"percentile":null,"score_date":null},"published_at":"2026-10-27T15:08:28.439Z","modified_at":"2026-10-27T15:08:28.439Z","provenance":[{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2026-92372","fetched_at":"2026-10-27T16:27:21.584480Z","source_modified_at":"2026-10-27T15:08:28.439Z"}],"sources":["CVE List"],"references":[{"source":"CVE List","url":"https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2026-1011/","tags":["vendor-advisory"]}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","cvss_source":"CVE List","classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":null,"confidence":"unknown","reviewed":false},"change_timestamp":"2026-10-27T15:08:28.439Z","content_hash":"f6e0c6e5cc3da38150e8d151cfc8c5282a69ed8fb19a8972e335d9ba56e83336"}}