Filtered by vendor Glavsoft (tightvnc)
Subscriptions
Total
1 CVE
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-128321 | 2 Glavsoft (tightvnc), Ultravnc | 2 Tightvnc, Ultravnc | 2026-11-15 | N/A |
| Tight JPEG decoding in TightVNC and UltraVNC viewers contains a heap-based buffer overflow because an attacker-controlled framebuffer rectangle width is not validated against a fixed-size decoding buffer. A malicious VNC server can cause an out-of-bounds heap write when a user connects, resulting in application crash and potentially other memory-corruption impacts. | ||||
Page 1 of 1.