VULNERABILITY INTELLIGENCE

CVE-2019-15692

CVSS score7.2 HIGH

EPSS probability4.77%

CISA KEVNot currently listed

Published2019-12-26

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Description

TigerVNC version prior to 1.10.1 is vulnerable to heap buffer overflow. Vulnerability could be triggered from CopyRectDecoder due to incorrect value checks. Exploitation of this vulnerability could potentially result into remote code execution. This attack appear to be exploitable via network connectivity.

Weakness classification

vulnerability@kaspersky.com: CWE-122
nvd@nist.gov: CWE-787

Primary references

vulnerability@kaspersky.com — Mailing List, Third Party Advisory
vulnerability@kaspersky.com — Patch, Third Party Advisory
vulnerability@kaspersky.com — Release Notes, Third Party Advisory
vulnerability@kaspersky.com — Exploit, Mailing List, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Mailing List, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Patch, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Release Notes, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Exploit, Mailing List, Third Party Advisory