Overview
- Security researcher Omri Dar of Remedio disclosed a high‑severity integer overflow in TeamViewer’s remote‑control screen processing that lets a host corrupt the viewer’s pixel buffer.
- The bug arises when a host declares oversized screen dimensions and the viewer allocates a drawing buffer with no enforced upper bound, which lets incoming image data overwrite adjacent memory.
- Remedio showed the flaw can repeatedly crash the viewer and demonstrated a Windows exploit that bypassed protections to execute arbitrary code, though cross‑platform code execution has not been fully shown.
- Exploitation requires a user to accept a remote‑control session to an attacker‑controlled or compromised host, needs no extra clicks or passwords, and works in TeamViewer’s default configuration.
- TeamViewer released fixes in version 15.83 and updated supported legacy branches, is urging all users to update because there is no practical workaround, and says it is not aware of any active in‑the‑wild exploits.