Skip to content

Libvncserver Project · weakness class

Memory Corruption

7 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

Every one of the 7 is a mark on the map. Named now: 1 to 7, most at risk first.

  1. Multiple stack-based buffer overflows in the File Transfer feature in rfbserver.c in LibVNCServer 0.9.9 and earlier allow remote authenticated users to cause a denial of service (…CVE-2014-6055Libvncserver · 7.8% likely

    CWE-119

  2. An issue was discovered in LibVNCServer through 0.9.11. rfbProcessClientNormalMessage() in rfbserver.c does not sanitize msg.cct.length, leading to access to uninitialized and pot…CVE-2018-7225Libvncserver Project · 6.1% likely

    CWE-190

  3. Heap-based buffer overflow in ultra.c in LibVNCClient in LibVNCServer before 0.9.11 allows remote servers to cause a denial of service (application crash) or possibly execute arbi…CVE-2016-9942Libvncserver Project · 3.8% likely

    CWE-119

  4. Heap-based buffer overflow in rfbproto.c in LibVNCClient in LibVNCServer before 0.9.11 allows remote servers to cause a denial of service (application crash) or possibly execute a…CVE-2016-9941Libvncserver Project · 3.7% likely

    CWE-119

  5. A NULL pointer dereference flaw was found in the way LibVNCServer before 0.9.9 handled certain ClientCutText message. A remote attacker could use this flaw to crash the VNC server…CVE-2010-5304Libvncserver Project · 3.1% likely

    CWE-476

  6. An issue was discovered in LibVNCServer before 0.9.13. libvncserver/scale.c has a pixel_value integer overflow.CVE-2020-14401Libvncserver Project · 2.5% likely

    CWE-190

  7. It was discovered that websockets.c in LibVNCServer prior to 0.9.12 did not properly decode certain WebSocket frames. A malicious attacker could exploit this by sending specially…CVE-2017-18922Libvncserver Project · 2.3% likely

    CWE-787

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-15 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.