AnyDesk Integer Overflow Vulnerability Leading to Heap-Based Buffer Overflow

A heap-based buffer overflow vulnerability has been identified in AnyDesk versions prior to 9.0.0. This issue arises from an integer overflow caused by the processing of Identity user images within the Discovery feature, specifically through UDP packets. The vulnerability can also be triggered when establishing a connection between two clients.

Impact

Exploitation of this vulnerability allows for a heap-based buffer overflow, which can potentially be exploited to execute arbitrary code.