These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
LibVNCClient versions 0.9.15 and earlier contain a heap-based buffer overflow in the Tight encoding decoder's Gradient filter. The vulnerability stems from a fixed-size 2048-pixel scratch buffer that is not validated against attacker-controlled rectangle widths in FramebufferUpdate messages. A malicious VNC server can craft a Tight-encoded rectangle with width exceeding 2048 pixels using NoZlib | Explicit [truncated]
CVE-2026-32854 is a null pointer dereference vulnerability in LibVNCServer versions 0.9.15 and prior. The vulnerability allows remote attackers to cause a denial of service by sending specially crafted HTTP requests to the server when the httpd and proxy features are enabled. This issue is caused by missing validation of strchr() return values in the CONNECT and GET proxy handling paths, leading to null p [truncated]
CVE-2026-32853 is a heap out-of-bounds read vulnerability in LibVNCServer versions 0.9.15 and prior. The vulnerability was fixed in commit 009008e and allows a malicious VNC server to cause information disclosure or application crash. Affected users should apply the patch to prevent potential information disclosure or application crashes. This vulnerability has a CVSS score of 6.9 and is considered Medium severity.