Vulnerability Description
An issue was discovered in AnyDesk for Windows before 9.0.5, AnyDesk for macOS before 9.0.1, AnyDesk for Linux before 7.0.0, AnyDesk for iOS before 7.1.2, and AnyDesk for Android before 8.0.0. Remote Denial of Service can occur because of incorrect deserialization that results in failed memory allocation and a NULL pointer dereference.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Anydesk | Anydesk | <= 9.0.4 |
Related Weaknesses (CWE)
References
- https://anydesk.com/en/changelog/windowsRelease Notes
- https://dspace.cvut.cz/bitstream/handle/10467/122721/F8-DP-2025-Krejsa-Vojtech-DExploitThird Party Advisory
FAQ
What is CVE-2025-27917?
CVE-2025-27917 is a vulnerability with a CVSS score of 7.5 (HIGH). An issue was discovered in AnyDesk for Windows before 9.0.5, AnyDesk for macOS before 9.0.1, AnyDesk for Linux before 7.0.0, AnyDesk for iOS before 7.1.2, and AnyDesk for Android before 8.0.0. Remote ...
How severe is CVE-2025-27917?
CVE-2025-27917 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2025-27917?
Check the references section above for vendor advisories and patch information. Affected products include: Anydesk Anydesk.