The vulnerability is an out‑of‑bounds write in the screen‑image decoder of TeamViewer Full Client for Linux and macOS. It allows a remote attacker to execute arbitrary code by supplying specially crafted screen‑image data during a remote‑control session or by persuading a user to open a malicious session‑recording (.tvs) file. The flaw originates from missing bounds checks on the destination buffer, which can lead to arbitrary code execution when the decoder processes the malicious data. This results in the attacker gaining code‑execution privileges on the client system.

The affected product is TeamViewer Full Client for Linux and macOS. Versions prior to 15.83 are vulnerable; all earlier releases must be reviewed for the presence of the flaw.

The CVSS base score of 8.8 indicates a high severity vulnerability. EPSS is not available, so the statistical likelihood of exploitation is unknown, and the issue is not listed in the CISA KEV catalog. Exploitation requires user interaction: the attacker must either initiate a remote-control session that delivers malicious screen-image data or convince a user to open a specially crafted .tvs file. The attack vector is therefore remote via an active remote-control session or local via a malicious session‑recording file opened by a user. If successful, the attacker can execute arbitrary code with the privileges of the currently logged‑in user on the client system.