Pakistan's National CERT has issued advisory NCA-25.311026 about a flaw in TeamViewer's screen-processing code. It includes the TeamViewer Remote Control app on Android in versions before 15.83, and 15.83 is the fixed version.
Who is affected
The flaw matters to anyone who uses an Android phone to control another computer through TeamViewer. TeamViewer's own security bulletin TV-2026-1011 lists "TeamViewer Remote Control (Android)" before version 15.83 as affected. The bulletin rates the issue High, with a score of 8.8 out of 10.
How it could be used
An attacker needs the user to start a remote-control session with a malicious or compromised computer. The bulletin says the flaw can cause a crash or, depending on the platform, run code with the viewer's own privileges. It does not describe any attack that needs no session.
What TeamViewer says about attacks
At the time of publication TeamViewer said it was not aware of any active exploitation in the wild.
What to do
Update the app to version 15.83 or later from Google Play, or from TeamViewer's APK download. Check the app's version under Settings, then Apps. The bulletin lists no other fix or workaround. Two other flaws in the same bulletin apply only to the Linux and macOS clients, so they do not concern Android phones.
For other phone security and tax news, see Phone news.