CVE record · 2 sources
CVE-2026-128321
Tight JPEG decoding in TightVNC and UltraVNC viewers contains a heap-based buffer overflow because an attacker-controlled framebuffer rectangle width…
- Vendor
- RealVNC / TightVNC
- Product
- UltraVNC, TightVNC
- Exposure class
- Remote access
Coverage
2Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
TightVNC and UltraVNC Viewer contains a heap-based buffer overflow
Overview A heap-based buffer overflow exists in the Tight JPEG decoding component of the TightVNC Windows Viewer version 1.3.10 and affected UltraVNC Windows Viewers. An attacker controlling a malicious VNC server can trigger…
-
Tight JPEG decoding in TightVNC and UltraVNC viewers contains a heap-based buffer overflow because an attacker-controlled framebuffer rectangle width…
Tight JPEG decoding in TightVNC and UltraVNC viewers contains a heap-based buffer overflow because an attacker-controlled framebuffer rectangle width is not validated against a fixed-size decoding buffer. A malicious VNC server…