Remote Denial of Service in AnyDesk Affects Remote Access Software
CVE-2025-27917

7.5HIGH

Key Information:

Vendor

AnyDesk
Status
AnyDesk
Vendor
CVE Published:
6 November 2025

What is CVE-2025-27917?

A newly identified flaw in AnyDesk versions up to 9.0.4 allows for a remote denial of service due to improper deserialization. This flaw can lead to memory allocation failures, resulting in a NULL pointer dereference. Attackers could exploit this vulnerability to disrupt service, rendering it unavailable to legitimate users. It's crucial for AnyDesk users to be aware of this issue and apply updates to mitigate potential risks.

References

https://anydesk.com/en/changelog/windows
https://dspace.cvut.cz/bitstream/handle/10467/122721/F8-D...

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.