Vulnerabilities

TI-2026-37265 CVE-2026-50538

libvncclient Tight decoder has an attacker-controlled heap out-of-bounds write

HIGH 73

LibVNCClient is a library for easy implementation of a VNC client.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00404 Published 2026-08-21 No fix listed CWE-122

TI-2026-32847 CVE-2026-44988

MEDIUM 40

LibVNCClient is a library for easy implementation of a VNC client.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00242 Published 2026-05-27 No fix listed CWE-787

TI-2019-11774 CVE-2019-15690 · GHSA-rx9w-c6jv-2grg

MEDIUM 41

LibVNCServer 0.9.12 release and earlier contains heap buffer overflow vulnerability within the HandleCursorShape() function in libvncclient/cursor.c.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00768 Published 2025-01-24 Partial fix CWE-122