Libvncserver / Libvncserver
18 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2026-32854 | LibVNCServer httpd proxy NULL Pointer Dereference | MEDIUM | 6.3 | Mar 24, 2026 |
| CVE-2026-32853 | LibVNCServer UltraZip Encoding Heap Out-of-bounds Read | MEDIUM | 6.9 | Mar 24, 2026 |
| CVE-2020-29260 | libvncserver: a memory leak via the function rfbClientCleanup() may lead to a DoS | HIGH | 7.5 | Sep 2, 2022 |
| CVE-2020-25708 | libvncserver: libvncserver/rfbserver.c has a divide by zero which could result in DoS | HIGH | 7.5 | Nov 27, 2020 |
| CVE-2017-18922 | libvncserver: websocket decoding buffer overflow | CRITICAL | 9.8 | Jun 30, 2020 |
| CVE-2020-14399 | libvncserver: byte-aligned data is accessed through uint32_t pointers in libvncclient/rfbproto.c | HIGH | 7.5 | Jun 17, 2020 |
| CVE-2020-14400 | libvncserver: byte-aligned data is accessed through uint16_t pointers in libvncserver/translate.c | HIGH | 7.5 | Jun 17, 2020 |
| CVE-2020-14401 | libvncserver: libvncserver/scale.c has a pixel_value integer overflow | MEDIUM | 6.5 | Jun 17, 2020 |
| CVE-2010-5304 | realvnc: Null pointer dereference flaw in ClientCutText message handling | HIGH | 7.5 | Feb 5, 2020 |
| CVE-2018-7225 | libvncserver: Improper input sanitization in rfbProcessClientNormalMessage in rfbserver.c | CRITICAL | 9.8 | Feb 19, 2018 |
| CVE-2016-9942 | libvncserver: Heap-based buffer overflow in ultra.c | CRITICAL | 9.8 | Dec 31, 2016 |
| CVE-2016-9941 | libvncserver: Heap-based buffer overflow in rfbproto.c | CRITICAL | 9.8 | Dec 31, 2016 |
| CVE-2014-6053 | libvncserver: server NULL pointer dereference flaw in ClientCutText message handling | MEDIUM | 5.0 | Dec 15, 2014 |
| CVE-2014-6052 | libvncserver: NULL pointer dereference flaw in framebuffer setup | HIGH | 7.5 | Dec 15, 2014 |
| CVE-2014-6054 | libvncserver: server divide-by-zero flaw in scaling factor handling | MEDIUM | 4.3 | Oct 6, 2014 |
| CVE-2014-6055 | libvncserver: server stacked-based buffer overflow flaws in file transfer handling | MEDIUM | 6.5 | Sep 30, 2014 |
| CVE-2014-6051 | libvncserver: integer overflow flaw, leading to a heap-based buffer overflow in screen size handling | HIGH | 7.5 | Sep 30, 2014 |
| CVE-2006-2450 | auth.c in LibVNCServer 0.7.1 allows remote attackers to bypass authentication via a request in which the client specifies an insecure security type such as "Ty… | HIGH | 7.5 | Jul 14, 2006 |
Showing 1 to 18 of 18 CVEs