← Vulnerability feed

Vulnerability record · CVE-2021-35005 · published 24 January 2022

CVE-2021-35005: Teamviewer out-of-bounds read vulnerability

Teamviewer · Teamviewer

This vulnerability allows local attackers to disclose sensitive information on affected installations of TeamViewer. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the TeamViewer service. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated array. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-13818.

3.3 CVSS 3.1 Low EPSS 0.89% · top 42.2% CWE-129 · CWE-129CWE-125 · Out-of-bounds read
3.3CVSS 3.1 base score, v2 2.1
0.89%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
4References
17 Jun 2026Last modified by NVD

Description

This vulnerability allows local attackers to disclose sensitive information on affected installations of TeamViewer. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the TeamViewer service. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated array. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-13818.

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://community.teamviewer.com/English/discussion/117794/august-updates-security-patches Vendor Advisory
https://www.zerodayinitiative.com/advisories/ZDI-22-082/ Third Party AdvisoryVDB Entry
https://community.teamviewer.com/English/discussion/117794/august-updates-security-patches Vendor Advisory
https://www.zerodayinitiative.com/advisories/ZDI-22-082/ Third Party AdvisoryVDB Entry

Track CVE-2021-35005 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.0CVE-2019-18988TeamViewer Desktop shared AES key bypasses remote-login access controlTeamViewer Desktop through 14.7.1965 uses the same AES key across all customer installations, including for OptionsPasswordAES. Anyone who knows that…KEVEPSS 4.7%analysed9.8CVE-2018-16550Teamviewer vulnerabilityTeamViewer 10.x through 13.x allows remote attackers to bypass the brute-force authentication protection mechanism by skipping the "Cancel" step, whi…EPSS 3.6%9.3CVE-2010-3128Teamviewer vulnerabilityUntrusted search path vulnerability in TeamViewer 5.0.8703 and earlier allows local users, and possibly remote attackers, to execute arbitrary code a…EPSS 8.4%8.8CVE-2021-34859Teamviewer memory buffer overflow vulnerabilityThis vulnerability allows remote attackers to execute arbitrary code on affected installations of TeamViewer 15.16.8.0. User interaction is required …EPSS 8.9%8.8CVE-2020-13699Teamviewer argument injection vulnerabilityTeamViewer Desktop for Windows before 15.8.3 does not properly quote its custom URI handlers. A malicious website could launch TeamViewer with arbitr…EPSS 26%8.8CVE-2019-18251Omron cx-supervisor vulnerabilityIn Omron CX-Supervisor, Versions 3.5 (12) and prior, Omron CX-Supervisor ships with Teamviewer Version 5.0.8703 QS. This version of Teamviewer is vul…EPSS 1.7%8.1CVE-2018-14333Teamviewer information exposure vulnerabilityTeamViewer through 13.1.1548 stores a password in Unicode format within TeamViewer.exe process memory between "[00 88] and "[00 00 00]" delimiters, w…EPSS 2.6%7.8CVE-2021-34858Teamviewer out-of-bounds read vulnerabilityThis vulnerability allows remote attackers to execute arbitrary code on affected installations of TeamViewer. User interaction is required to exploit…EPSS 3.8%

Source: NIST National Vulnerability Database (record CVE-2021-35005), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.