CVE-2019-15692CWE-122

TigerVNC version prior to 1.10.1 is vulnerable to heap buffer overflow

published December 26, 2019

CVSS
—
EPSS
5%
Percentile
91.9
In the wild
Unconfirmed
What it is

TigerVNC version prior to 1.10.1 is vulnerable to heap buffer overflow. Vulnerability could be triggered from CopyRectDecoder due to incorrect value checks. Exploitation of this vulnerability could potentially result into remote code execution. This attack appear to be exploitable via network connectivity.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04773 · 91.9th percentile
Weakness
CWE-122 · Heap-based Buffer Overflow
Published
2019-12-26T14:55Z
EPSS history
Timeline
  • 26 DEC 14:55Z
    TigerVNC version prior to 1.10.1 is vulnerable to heap buffer overflow
    cvelistv5