Vulnerability Description
An issue was discovered in AnyDesk for Windows before 9.0.5, AnyDesk for macOS before 9.0.1, AnyDesk for Linux before 7.0.0, AnyDesk for iOS before 7.1.2, and AnyDesk for Android before 8.0.0. It has an integer overflow and resultant heap-based buffer overflow via a UDP packet during processing of an Identity user image within the Discovery feature, or when establishing a connection between any two clients.
CVSS Score
CRITICAL
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Anydesk | Anydesk | < 9.0.0 |
Related Weaknesses (CWE)
References
- https://anydesk.com/en/changelog/windowsRelease Notes
- https://dspace.cvut.cz/bitstream/handle/10467/122721/F8-DP-2025-Krejsa-Vojtech-DExploitThird Party Advisory
FAQ
What is CVE-2025-27918?
CVE-2025-27918 is a vulnerability with a CVSS score of 9.8 (CRITICAL). An issue was discovered in AnyDesk for Windows before 9.0.5, AnyDesk for macOS before 9.0.1, AnyDesk for Linux before 7.0.0, AnyDesk for iOS before 7.1.2, and AnyDesk for Android before 8.0.0. It has ...
How severe is CVE-2025-27918?
CVE-2025-27918 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2025-27918?
Check the references section above for vendor advisories and patch information. Affected products include: Anydesk Anydesk.