Threats tagged 'ghsa-gj3p-4hcp-q7w6'

A heap-based buffer overflow vulnerability exists in TeamViewer Full Client and Host for Linux and macOS versions 15.70 up to but not including 15.82. The flaw occurs during the processing of .tvs session recording files due to a size mismatch in decompression, which can lead to out-of-bounds heap writes. An attacker who convinces a user to open a specially crafted session recording file via the "Play or convert recorded session…" feature could achieve arbitrary code execution with the current user's privileges.