CVE-2019-15680

—

CVSS 3.1

7.5 high

EPSS

3%p85

Published

Oct 29, 2019 (Oct 29, 2019)

Modified

Jun 17, 2026

Description

TightVNC code version 1.3.10 contains null pointer dereference in HandleZlibBPP function, which results Denial of System (DoS). This attack appear to be exploitable via network connectivity.

Vendors: tightvnc
Products: tightvnc
Weakness: CWE-476
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (2.7%)

In the news0 stories

No ingested article mentions this CVE yet.