An integer overflow in the remote-control screen processing component of TeamViewer clients (Full Client, Portable and Remote Control App) prior to version 15.83 may allow a malicious remote host to cause a denial of service or, depending on the platform, potentially execute arbitrary code with the privileges of the viewer process. Exploitation requires a user to establish a remote-control session to an attacker-controlled or compromised host.
https://github.com/googlesky/CVE-2026-111585
https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2026-1011/