TI-2026-37265 CVE-2026-50538
libvncclient Tight decoder has an attacker-controlled heap out-of-bounds write
Priority HIGH 73
LibVNCClient is a library for easy implementation of a VNC client.
LibVNC
Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9
Exploited now
LibVNC records in CISA KEVNo LibVNC vulnerabilities are listed in CISA KEV.
Records
3 records
TI-2019-11774 CVE-2019-15690 · GHSA-rx9w-c6jv-2grg
Heap-based buffer overflow in LibVNCServer
Priority MEDIUM 41
LibVNCServer 0.9.12 release and earlier contains heap buffer overflow vulnerability within the HandleCursorShape() function in libvncclient/cursor.c.
TI-2026-32847 CVE-2026-44988
LibVNCClient Tight Gradient decoding allows malicious server-triggered heap/stack OOB writes
Priority MEDIUM 40
LibVNCClient is a library for easy implementation of a VNC client.