5 matches found
MGASA-2026-0315 Updated libvncserver packages fix security vulnerabilities
The updated packages fix security vulnerabilities: Heap Out-of-Bounds Read in HandleUltraZipBPP due to unchecked subrectangle count. CVE-2026-32853 NULL pointer dereferences in httpd proxy handlers via malformed CONNECT/GET requests. CVE-2026-32854 LibVNCClient Tight Gradient decoding allows...
8.8CVSS5.5AI score0.05322EPSS
SaveExploits2References9
20