CVE-2019-15694CWE-122

TigerVNC version prior to 1.10.1 is vulnerable to heap buffer overflow, which could be triggered from DecodeManager::decodeRect

published December 26, 2019

CVSS
—
EPSS
4%
Percentile
91.4
In the wild
Unconfirmed
What it is

TigerVNC version prior to 1.10.1 is vulnerable to heap buffer overflow, which could be triggered from DecodeManager::decodeRect. Vulnerability occurs due to the signdness error in processing MemOutStream. Exploitation of this vulnerability could potentially result into remote code execution. This attack appear to be exploitable via network connectivity.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04485 · 91.4th percentile
Weakness
CWE-122 · Heap-based Buffer Overflow
Published
2019-12-26T14:59Z
EPSS history
Timeline
  • 26 DEC 14:59Z
    TigerVNC version prior to 1.10.1 is vulnerable to heap buffer overflow, which could be triggered from DecodeManager::decodeRect
    cvelistv5