Container suse/kiosk/tigervnc-x11vnc:1.14-63.8 vulnerabilities

2 known vulnerabilities in Container suse/kiosk/tigervnc-x11vnc:1.14-63.8 from SUSE. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.0 Critical severity

  Container suse/kiosk/tigervnc-x11vnc:1.14-63.8: Out-of-bounds Write

  CVE-2026-59679Sep 10, 2026SUSE

  fs_read_glyphs() in the libXfont2 font-server client (src/fc/fserve.c) indexes the per-character encoding[] array using num_chars from the FS_QueryXBitmaps16 reply, but that array was allocated with a size derived from num_extents in the separate FS_QueryXExte

• 9.0 Critical severity

  Container suse/kiosk/tigervnc-x11vnc:1.14-63.8: Heap-based Buffer Overflow

  CVE-2026-44950Sep 10, 2026SUSE

  fs_read_glyphs() in the libXfont2 font-server client (src/fc/fserve.c) copies each glyph's bitmap into a single buffer. Existing checks validates only that the source slice (position, length) lies within the source bitmap buffer. It does not check whether the