Libvncserver · Libvncserver · CVE-2020-14402
**Name of the Vulnerable Software and Affected Versions**
LibVNCServer versions prior to 0.9.13
**Description**
The issue is caused by an out-of-bounds access in the libvncserver/corre.c component of the LibVNCServer library. This can be exploited by a remote attacker to impact the confidentiality, integrity, and availability of protected information.
**Recommendations**
For versions prior to 0.9.13, update to version 0.9.13 or later to resolve the issue. As a temporary workaround, consider restricting access to the libvncserver/corre.c component until a patch is available.