Libvncserver (Libvncserver Project) - vulnerabilities (CVEs)
12 CVEs, 0 in the last 30 days, 15 known versions, newest CVE from 2026-03-24. Vendor: Libvncserver Project.
CVEs of Libvncserver
- CVE-2026-32854 - CVSS 7.5 (high), 2026-03-24: LibVNCServer versions 0.9.15 and prior (fixed in commit dc78dee) contain null pointer dereference vulnerabilities in the HTTP proxy handlers within…
- CVE-2026-32853 - CVSS 8.1 (high), 2026-03-24: LibVNCServer versions 0.9.15 and prior (fixed in commit 009008e) contain a heap out-of-bounds read vulnerability in the UltraZip encoding handler that allows…
- CVE-2020-29260 - CVSS 7.5 (high), 2022-09-02: libvncclient v0.9.13 was discovered to contain a memory leak via the function rfbClientCleanup().
- CVE-2020-25708 - CVSS 7.5 (high), 2020-11-27: A divide by zero issue was found to occur in libvncserver-0.9.12. A malicious client could use this flaw to send a specially crafted message that, when…
- CVE-2017-18922 - CVSS 9.8 (critical), 2020-06-30: It was discovered that websockets.c in LibVNCServer prior to 0.9.12 did not properly decode certain WebSocket frames. A malicious attacker could exploit this…
- CVE-2020-14401 - CVSS 6.5 (medium), 2020-06-17: An issue was discovered in LibVNCServer before 0.9.13. libvncserver/scale.c has a pixel_value integer overflow.
- CVE-2020-14399 - CVSS 7.5 (high), 2020-06-17: An issue was discovered in LibVNCServer before 0.9.13. Byte-aligned data is accessed through uint32_t pointers in libvncclient/rfbproto.c. NOTE: there is…
- CVE-2020-14400 - CVSS 7.5 (high), 2020-06-17: An issue was discovered in LibVNCServer before 0.9.13. Byte-aligned data is accessed through uint16_t pointers in libvncserver/translate.c. NOTE: Third…
- CVE-2010-5304 - CVSS 7.5 (high), 2020-02-05: A NULL pointer dereference flaw was found in the way LibVNCServer before 0.9.9 handled certain ClientCutText message. A remote attacker could use this flaw to…
- CVE-2018-7225 - CVSS 9.8 (critical), 2018-02-19: An issue was discovered in LibVNCServer through 0.9.11. rfbProcessClientNormalMessage() in rfbserver.c does not sanitize msg.cct.length, leading to access to…
- CVE-2016-9942 - CVSS 9.8 (critical), 2016-12-31: Heap-based buffer overflow in ultra.c in LibVNCClient in LibVNCServer before 0.9.11 allows remote servers to cause a denial of service (application crash) or…
- CVE-2016-9941 - CVSS 9.8 (critical), 2016-12-31: Heap-based buffer overflow in rfbproto.c in LibVNCClient in LibVNCServer before 0.9.11 allows remote servers to cause a denial of service (application crash)…
