NULL pointer dereference in Libvnc Libvncserver
CVE-2026-32854
LibVNCServer versions 0.9.15 and prior (fixed in commit dc78dee) contain null pointer dereference vulnerabilities in the HTTP proxy handlers within httpProcessInput() in httpd.c that allow remote attackers to cause a denial of service by sending specially crafted HTTP requests. Attackers can exploit missing validation of strchr() return values in the CONNECT and GET proxy handling paths to trigger null pointer dereferences and crash the server when httpd and proxy features are enabled.
Published · last modified .
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.
EPSS exploit prediction
EPSS: 0.053 (92.3th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 92nd percentile — 92.3% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.053 · newest: 0.053 · change: 0.000
Affected products
- Libvnc Libvncserver — versions 0, dc78dee51a7e270e537a541a17befdf2073f5314
- Libvncserver Project
Weakness classification (CWE)
References
- github.com/LibVNC/libvncserver/security/advisories/GHSA-xjp8-4qqv-5x4x (Exploit, vendor-advisory, Vendor Advisory)
- github.com/LibVNC/libvncserver/commit/dc78dee51a7e270e537a541a17befdf2073f5314 (Patch, patch)
- www.vulncheck.com/advisories/libvncserver-httpd-proxy-null-pointer-dereference (Third Party Advisory, third-party-advisory)
Frequently asked questions
- What is CVE-2026-32854?
- CVE-2026-32854 is a high-severity vulnerability in Libvnc Libvncserver, classified under NULL Pointer Dereference. CVSS score: 7.5/10. Published 2026-03-24.
- How severe is CVE-2026-32854?
- High severity. CVSS v3 base score is 7.5 out of 10.