CVE-2026-32853
High · 8.1CVSS
8.1
EPSS
0.4%
Published
Mar 24, 2026
CISA due date
—
The record
LibVNCServer versions 0.9.15 and prior (fixed in commit 009008e) contain a heap out-of-bounds read vulnerability in the UltraZip encoding handler that allows a malicious VNC server to cause information disclosure or application crash. Attackers can exploit improper bounds checking in the HandleUltraZipBPP() function by manipulating subrectangle header counts to read beyond the allocated heap buffer.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| SUSE:Linux Enterprise Module for Package Hub 15 SP7 | LibVNCServer | 0 | 0.9.14-150600.3.6.1 |
| SUSE:Linux Enterprise Workstation Extension 15 SP7 | LibVNCServer | 0 | 0.9.14-150600.3.6.1 |
| openSUSE:Leap 15.6 | LibVNCServer | 0 | 0.9.14-150600.3.6.1 |
| openSUSE:Leap 16.0 | LibVNCServer | 0 | 0.9.14-160000.4.1 |
| openSUSE:Tumbleweed | LibVNCServer | 0 | 0.9.15-2.1 |
Related vulnerabilities
- CVE-2026-32854 LibVNCServer versions 0.9.15 and prior (fixed in commit dc78dee) contain null pointer… Also affects LibVNCServer
- CVE-2026-44988 LibVNCClient is a library for easy implementation of a VNC client. Also affects LibVNCServer
- CVE-2026-92824 A flaw was found in libmodulemd. CWE-125
- CVE-2026-114038 A flaw was found in device-mapper-multipath. CWE-125
- CVE-2026-112896 Pillow is a Python imaging library. CWE-125
- CVE-2026-112278 rdesktop through 1.9.0 contains a heap out-of-bounds read vulnerability in… CWE-125
- CVE-2026-112273 libtins through 4.6 contains a heap out-of-bounds read vulnerability in DNS::compose_name… CWE-125
- CVE-2026-112073 A vulnerability was identified in Tencent ncnn up to 44b02dabdcf97499281a4692ebd65bad73dc… CWE-125