PT-2026-52181 · Unknown · Libvncclient+1

Published 2026-06-15 · Updated 2026-07-02 · CVE-2026-50538

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions LibVNCServer (affected versions not specified)

Description An issue exists in the Tight decoder within libvncclient where heap out-of-bounds writes occur. A remote attacker can exploit this to cause the server to crash, leading to a denial of service, or potentially execute arbitrary code.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2026-50538

USN-8494-1

Affected Products

Libvncserver

Libvncclient

References · 8

• https://ubuntu.com/security/notices/USN-8494-1 · Vendor Advisory
• https://osv.dev/vulnerability/USN-8494-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-50538 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-50538 · Security Note
• https://ubuntu.com/security/CVE-2026-50538 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2026-50538 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-50538 · Vendor Advisory
• https://github.com/LibVNC/libvncserver/security/advisories/GHSA-v9pm-47h4-jcq8 · Note