CVE-2019-8260 - AskarLabs CVE Database

CVE-2019-8260

Vendor Ultravnc

Product UltraVNC

Weakness CWE-125

Published March 5, 2019

Last update September 16, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

UltraVNC revision 1199 has a out-of-bounds read vulnerability in VNC client RRE decoder code, caused by multiplication overflow. This attack appears to be exploitable via network connectivity. This vulnerability has been fixed in revision 1200.

Key dates

02Disclosure timeline

March 5, 2019 CVE published

September 16, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2019-8260 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/125.html

Related vulnerabilities

04Related CVE

CVE-2021-41210 Heap OOB read in `tf.raw_ops.SparseCountSparseOutput` CVE-2025-24988 Windows USB Video Class System Driver Elevation of Privilege Vulnerability CVE-2024-11571 IrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability CVE-2025-66589 Out-of-bounds Read vulnerability in AzeoTech DAQFactory CVE-2026-3442 Binutils: gnu binutils: information disclosure or denial of service via out-of-bounds read in bfd linker