AnyPwn: AnyDesk preauth 0click RCE (heap buffer overflow) we will release PoC post disclosure and patch

We are aware of this vulnerability. To summarize our current impact assessment: this is limited to direct connections on Linux (connections that do not go through our relays). Windows and macOS are not affected. Based on our initial assessment, we have identified no evidence of exploitation against our infrastructure or customer environments. A patch is expected to be released within 48 hours.

found using V12 by @rdjgr of the V12 security team V12 is our autonomous AI hacker. You can find bugs like this in your code:

Une RCE pré-auth 0-click sur AnyDesk via un heap buffer overflow, c'est le genre de vulnérabilité qui fait transpirer toutes les équipes SecOps. Le dump de l'exploit avec le heap spraying et les chaînes ROP pour bypass les protections mémoire a l'air très solide. Si c'est validé, c'est une faille critique de premier ordre. Sage décision d'attendre le patch officiel avant de drop le PoC. On va surveiller ça de très près

Scambusting channels about to go wild 👀

@chompie1337 Nah release it now, embrace the chaos

@steventseeley nice bop

this is huge, byovrmm ttp comming soon. gg

@chompie1337 echo lmao

I posted something very similar last week to my github... does V12 have internet usage enabled? Did it just find my repo or did it find this independently

SONG?

Scammer payback is doomed

heap overflow di remote desktop tool — attack surface-nya udah ada di nama

kiyosumi fits so well

call centers about to go down

:D

Do you have to be on the same network to exploit the vulnerability?

Does this vulnerability exist in the latest version of AnyDesk?

@akaclandestine Can’t wait to try

I hope it's not one of the exploits @ScammerPayback is using

Does it only affect Linux?

Can this loophole be found by using AI to automatically mine?

Viva la @rustdesk !

Does this affect Windows too? I'm worried now because I unironically use AnyDesk lmfao

cve?

is it only linux, or is windows vulnerable too?