LibVNC vulnerabilities
We track 4 vulnerabilities in LibVNC products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on August 21, 2026.
Latest LibVNC vulnerabilities
- 8.8 High severity
libvncserver: Heap-based Buffer Overflow
LibVNCClient is a library for easy implementation of a VNC client. In versions 0.9.12 through 0.9.15, a malicious (or man-in-the-middle) VNC server can force a connecting `libvncclient` to write attacker-controlled data past the end of its framebuffer. This is
- 8.8 High severity
libvncserver: Out-of-bounds Write
LibVNCClient is a library for easy implementation of a VNC client. In 0.9.15 and earlier, LibVNCClient's Tight encoding decoder uses fixed-size 2048-pixel scratch buffers for the Gradient filter, but it does not reject Tight rectangles whose width is larger th
- 7.5 High severity
LibVNCServer: NULL Pointer Dereference
LibVNCServer versions 0.9.15 and prior (fixed in commit dc78dee) contain null pointer dereference vulnerabilities in the HTTP proxy handlers within httpProcessInput() in httpd.c that allow remote attackers to cause a denial of service by sending specially craf
- 8.1 High severity
LibVNCServer: Out-of-bounds Read
LibVNCServer versions 0.9.15 and prior (fixed in commit 009008e) contain a heap out-of-bounds read vulnerability in the UltraZip encoding handler that allows a malicious VNC server to cause information disclosure or application crash. Attackers can exploit imp