LibVNCServer versions 0.9.15 and prior (fixed in commit 009008e) contain a heap out-of-bounds read vulnerability in the UltraZip encoding handler that allows a malicious VNC server to cause information disclosure or application crash. Attackers can exploit improper bounds checking in the HandleUltraZipBPP() function by manipulating subrectangle header counts to read beyond the allocated heap buffer.
References
Configurations
History
25 Mar 2026, 20:48
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/LibVNC/libvncserver/commit/009008e2f4d5a54dd71f422070df3af7b3dbc931 - Patch | |
| References | () https://github.com/LibVNC/libvncserver/security/advisories/GHSA-87q7-v983-qwcj - Vendor Advisory | |
| References | () https://www.vulncheck.com/advisories/libvncserver-ultrazip-encoding-heap-out-of-bounds-read - Exploit, Vendor Advisory | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 8.1 |
| First Time |
Libvncserver Project libvncserver
Libvncserver Project |
|
| CPE | cpe:2.3:a:libvncserver_project:libvncserver:*:*:*:*:*:*:*:* |
25 Mar 2026, 14:16
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/LibVNC/libvncserver/security/advisories/GHSA-87q7-v983-qwcj - |
24 Mar 2026, 18:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-03-24 18:16
Updated : 2026-03-25 20:48
NVD link : CVE-2026-32853
Mitre link : CVE-2026-32853
CVE.ORG link : CVE-2026-32853
JSON object : View
Products Affected
libvncserver_project
- libvncserver
CWE
CWE-125
Out-of-bounds Read