Threats tagged 'ghsa-2p63-5vwr-rhf8'

An out-of-bounds write vulnerability exists in the screen-image decoder of TeamViewer Full Client for Linux and macOS versions prior to 15.83. This flaw allows a remote attacker to execute arbitrary code by sending crafted screen-image data during a remote-control session or by tricking a user into opening a malicious TeamViewer session recording (.tvs) file. Exploitation requires user interaction. The vulnerability arises from missing destination bounds checking in the decoder, leading to an out-of-bounds write to the image buffer.