CVE-2025-27918

An issue was discovered in AnyDesk for Windows before 9.0.5, AnyDesk for macOS before 9.0.1, AnyDesk for Linux before 7.0.0, AnyDesk for iOS before 7.1.2, and…

Critical · published November 6, 2025

CVSS v3.1
9.8
EPSS
1%
Percentile
44.1
In the wild
Unconfirmed
What it is

🚨 An integer overflow in AnyDesk could let attackers crash your system or execute malicious code with a crafted UDP packet! 🔥 Think of it like a crowded elevator that suddenly receives too many floor requests at once—when it tries to process them, it can break down or malfunction, leaving everyone inside in a risky situation. With this vulnerability, an attacker can exploit the overflow to create a chaos scenario: crashing your application or, worse, executing arbitrary code, essentially giving them the keys to your digital office! This could lead to sensitive data exposure or even a full system takeover. The risk is absolutely devastating!

Put simply

Think of it like a crowded elevator that suddenly receives too many floor requests at once—when it tries to process them, it can break down or malfunction, leaving everyone inside in a risky situation. This vulnerability stems from an integer overflow that occurs while processing Identity user images during the Discovery feature, or when establishing connections between clients. The result is a heap-based buffer overflow, making it ripe for exploitation.

What to do

With this vulnerability, an attacker can exploit the overflow to create a chaos scenario: crashing your application or, worse, executing arbitrary code, essentially giving them the keys to your digital office! This could lead to sensitive data exposure or even a full system takeover. The risk is absolutely devastating! To protect yourself, update AnyDesk to version 9.0.5 for Windows, 9.0.1 for macOS, 7.0.0 for Linux, 7.1.2 for iOS, and 8.0.0 for Android immediately. Ensure that you're not using any older versions that might still be vulnerable! You've got this! With these updates, you’ll shore up your defenses and keep your systems safe! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00531 · 44.1th percentile
Published
2025-11-06T00:00Z
EPSS history
Timeline
  • 06 NOV 00:00Z
    An issue was discovered in AnyDesk for Windows before 9.0.5, AnyDesk for macOS before 9.0.1, AnyDesk for Linux before 7.0.0, AnyDesk for iOS before 7.1.2, and…
    cvelistv5