Skip to content

Libvncserver Project · product

Libvncserver

16 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

Every one of the 16 is a mark on the map. Named now: 1 to 16, most at risk first.

  1. Integer overflow in the MallocFrameBuffer function in vncviewer.c in LibVNCServer 0.9.9 and earlier allows remote VNC servers to cause a denial of service (crash) and possibly exe…CVE-2014-6051Libvncserver · 8.3% likely

    CWE-189

  2. Multiple stack-based buffer overflows in the File Transfer feature in rfbserver.c in LibVNCServer 0.9.9 and earlier allow remote authenticated users to cause a denial of service (…CVE-2014-6055Libvncserver · 7.8% likely

    CWE-119

  3. The rfbProcessClientNormalMessage function in libvncserver/rfbserver.c in LibVNCServer 0.9.9 and earlier does not properly handle attempts to send a large amount of ClientCutText…CVE-2014-6053Libvncserver · 7.3% likely

    CWE-19

  4. The HandleRFBServerMessage function in libvncclient/rfbproto.c in LibVNCServer 0.9.9 and earlier does not check certain malloc return values, which allows remote VNC servers to ca…CVE-2014-6052Libvncserver · 6.8% likely

    CWE-20

  5. An issue was discovered in LibVNCServer through 0.9.11. rfbProcessClientNormalMessage() in rfbserver.c does not sanitize msg.cct.length, leading to access to uninitialized and pot…CVE-2018-7225Libvncserver Project · 6.1% likely

    CWE-190

  6. The rfbProcessClientNormalMessage function in libvncserver/rfbserver.c in LibVNCServer 0.9.9 and earlier allows remote attackers to cause a denial of service (divide-by-zero error…CVE-2014-6054Libvncserver · 5.5% likely

    CWE-189

  7. auth.c in LibVNCServer 0.7.1 allows remote attackers to bypass authentication via a request in which the client specifies an insecure security type such as "Type 1 - None", which…CVE-2006-2450Libvncserver · 4.4% likely
  8. Heap-based buffer overflow in ultra.c in LibVNCClient in LibVNCServer before 0.9.11 allows remote servers to cause a denial of service (application crash) or possibly execute arbi…CVE-2016-9942Libvncserver Project · 3.8% likely

    CWE-119

  9. Heap-based buffer overflow in rfbproto.c in LibVNCClient in LibVNCServer before 0.9.11 allows remote servers to cause a denial of service (application crash) or possibly execute a…CVE-2016-9941Libvncserver Project · 3.7% likely

    CWE-119

  10. A NULL pointer dereference flaw was found in the way LibVNCServer before 0.9.9 handled certain ClientCutText message. A remote attacker could use this flaw to crash the VNC server…CVE-2010-5304Libvncserver Project · 3.1% likely

    CWE-476

  11. An issue was discovered in LibVNCServer before 0.9.13. Byte-aligned data is accessed through uint16_t pointers in libvncserver/translate.c. NOTE: Third parties do not consider thi…CVE-2020-14400Libvncserver Project · 2.8% likely
  12. An issue was discovered in LibVNCServer before 0.9.13. Byte-aligned data is accessed through uint32_t pointers in libvncclient/rfbproto.c. NOTE: there is reportedly "no trust boun…CVE-2020-14399Libvncserver Project · 2.8% likely
  13. An issue was discovered in LibVNCServer before 0.9.13. libvncserver/scale.c has a pixel_value integer overflow.CVE-2020-14401Libvncserver Project · 2.5% likely

    CWE-190

  14. It was discovered that websockets.c in LibVNCServer prior to 0.9.12 did not properly decode certain WebSocket frames. A malicious attacker could exploit this by sending specially…CVE-2017-18922Libvncserver Project · 2.3% likely

    CWE-787

  15. A divide by zero issue was found to occur in libvncserver-0.9.12. A malicious client could use this flaw to send a specially crafted message that, when processed by the VNC server…CVE-2020-25708Libvncserver Project · 1.5% likely

    CWE-369

  16. libvncclient v0.9.13 was discovered to contain a memory leak via the function rfbClientCleanup().CVE-2020-29260Libvncserver Project · 1.1% likely

    CWE-400

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.