Threats affecting pkg:github/ultravnc/ultravnc

A heap-based buffer overflow vulnerability exists in the Tight JPEG decoding component of TightVNC and UltraVNC viewers. This occurs because the width of a framebuffer rectangle, controlled by an attacker, is not validated against a fixed-size decoding buffer. A malicious VNC server can exploit this flaw to cause an out-of-bounds heap write when a user connects, leading to application crashes and potential memory corruption.