scrcpy vulnerabilities

1 known vulnerability in scrcpy from Genymobile. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.1 Critical severity

  scrcpy: Deserialization of Untrusted Data

  CVE-2025-34449Dec 18, 2025Genymobile

  Genymobile/scrcpy versions up to and including 3.3.3, prior to commit 3e40b24, contain a buffer overflow vulnerability in the sc_device_msg_deserialize() function. A compromised device can send crafted messages that cause out-of-bounds reads, which may result