Threats tagged 'ghsa-2v2r-xq5w-26rm'

A heap-based buffer overflow vulnerability exists in the Tight JPEG decoding component of TightVNC and UltraVNC viewers. This occurs because the width of an attacker-controlled framebuffer rectangle is not validated against a fixed-size decoding buffer. A malicious VNC server can exploit this flaw to cause an out-of-bounds heap write when a user connects, potentially leading to application crashes and other memory corruption effects.