Memory Leak in LibVNC Server Code Impacts Multiple Platforms

CVE-2019-15681

Summary

A memory leak issue has been identified in the VNC server code of LibVNC, which may allow attackers to read stack memory. This vulnerability poses a risk of information disclosure and can be exploited over network connectivity. Moreover, when combined with other vulnerabilities, it may enable attackers to bypass Address Space Layout Randomization (ASLR) protections. A fix has been implemented in the commit d01e1bb4246323ba6fcee3b82ef1faa9b1dac82a, addressing the vulnerabilities and securing the affected versions.

References