CVE-2025-27917 Null dereference in n/a

What is CVE-2025-27917?

CVE-2025-27917 is a high-severity vulnerability in n/a, published on 6 Nov 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

An issue was discovered in AnyDesk for Windows before 9.0.5, AnyDesk for macOS before 9.0.1, AnyDesk for Linux before 7.0.0, AnyDesk for iOS before 7.1.2, and AnyDesk for Android before 8.0.0. Remote Denial of Service can occur because of incorrect deserialization that results in failed memory allocation and a NULL pointer dereference.

Weakness: CWE-476

Which versions are affected by CVE-2025-27917?

It affects 1 product.

Products include Anydesk Anydesk.

How do I fix CVE-2025-27917?

No fix has been published for CVE-2025-27917 yet. Limit exposure of the affected software until one is available.

Is CVE-2025-27917 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2025-27917 exists.

Other vulnerabilities in n/a

• CVE-2025-27918 Integer overflow in n/a Critical 9.8
• CVE-2020-13160 Other in n/a Critical 9.8
• CVE-2017-14397 AnyDesk before 3.6.1 on Windows has a DLL injection vulnerability. Critical 9.8
• CVE-2021-44426 File upload in n/a High 8.8
• CVE-2016-20094 AnyDesk 2.5.0 Unquoted Service Path Elevation of Privilege High 8.5

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-3ghq-53cj-qqmp.