CVE-2019-15680

7.5 highEPSS 2.7%

TightVNC code version 1.3.10 contains null pointer dereference in HandleZlibBPP function, which results Denial of System (DoS). This attack appear to be exploitable via network connectivity.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS: 2.7% chance of exploitation in the next 30 days; higher than 85% of CVEs (scores of 2026-10-31)
CWE: CWE-476
Published: 2019-10-29
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

tightvnc:tightvnc

References

https://cert-portal.siemens.com/productcert/pdf/ssa-478893.pdf
https://lists.debian.org/debian-lts-announce/2019/12/msg00028.html
https://us-cert.cisa.gov/ics/advisories/icsa-20-343-08
https://usn.ubuntu.com/4407-1/
https://www.openwall.com/lists/oss-security/2018/12/10/5

Check your stack JSON