Libvncserver_project Libvncserver
12 CVEs affecting Libvncserver_project Libvncserver. Latest disclosed: 2026-03-24. Critical: 4, High: 7.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-18922 | Critical | 9.8 | 2020-06-30 | It was discovered that websockets.c in LibVNCServer prior to 0.9.12 did not properly decode certain WebSocket frames. A malicious attacker could exploit this b… |
CVE-2018-7225 | Critical | 9.8 | 2018-02-19 | An issue was discovered in LibVNCServer through 0.9.11. rfbProcessClientNormalMessage() in rfbserver.c does not sanitize msg.cct.length, leading to access to u… |
CVE-2016-9942 | Critical | 9.8 | 2016-12-31 | Heap-based buffer overflow in ultra.c in LibVNCClient in LibVNCServer before 0.9.11 allows remote servers to cause a denial of service (application crash) or p… |
CVE-2016-9941 | Critical | 9.8 | 2016-12-31 | Heap-based buffer overflow in rfbproto.c in LibVNCClient in LibVNCServer before 0.9.11 allows remote servers to cause a denial of service (application crash) o… |
CVE-2026-32853 | High | 8.1 | 2026-03-24 | LibVNCServer versions 0.9.15 and prior (fixed in commit 009008e) contain a heap out-of-bounds read vulnerability in the UltraZip encoding handler that allows a… |
CVE-2026-32854 | High | 7.5 | 2026-03-24 | LibVNCServer versions 0.9.15 and prior (fixed in commit dc78dee) contain null pointer dereference vulnerabilities in the HTTP proxy handlers within httpProcess… |
CVE-2020-29260 | High | 7.5 | 2022-09-02 | libvncclient v0.9.13 was discovered to contain a memory leak via the function rfbClientCleanup(). |
CVE-2020-25708 | High | 7.5 | 2020-11-27 | A divide by zero issue was found to occur in libvncserver-0.9.12. A malicious client could use this flaw to send a specially crafted message that, when process… |
CVE-2020-14400 | High | 7.5 | 2020-06-17 | An issue was discovered in LibVNCServer before 0.9.13. Byte-aligned data is accessed through uint16_t pointers in libvncserver/translate.c. NOTE: Third parties… |
CVE-2020-14399 | High | 7.5 | 2020-06-17 | An issue was discovered in LibVNCServer before 0.9.13. Byte-aligned data is accessed through uint32_t pointers in libvncclient/rfbproto.c. NOTE: there is repor… |
CVE-2010-5304 | High | 7.5 | 2020-02-05 | A NULL pointer dereference flaw was found in the way LibVNCServer before 0.9.9 handled certain ClientCutText message. A remote attacker could use this flaw to… |
CVE-2020-14401 | Medium | 6.5 | 2020-06-17 | An issue was discovered in LibVNCServer before 0.9.13. libvncserver/scale.c has a pixel_value integer overflow. |