VDB
GHSA-96hw-425v-fcg3
GHSA-96hw-425v-fcg3
PUBLISHED
CVSS 9.800000190734863 CRITICAL
Record from GitHub Advisory Database · Published May 13, 2022
UltraVNC revision 1207 has multiple out-of-bounds access vulnerabilities connected with improper usage of SETPIXELS macro in VNC client code, which can potentially result in code execution. This attack appears to be exploitable via network connectivity. These vulnerabilities have been fixed in revision 1208.
Risk scores
CVSS 3.0
9.800000190734863
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Timeline
- May 13, 2022 CVE Published
- Apr 9, 2026 Security Advisory
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln GHSA-96hw-425v-fcg3
vulnetix vdb fixes GHSA-96hw-425v-fcg3Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/GHSA-96hw-425v-fcg3/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart
References
- https://cert-portal.siemens.com/productcert/pdf/ssa-927095.pdf url
- https://ics-cert.kaspersky.com/advisories/klcert-advisories/2019/03/01/klcert-19-012-ultravnc-access-of-memory-location-after-end-of-buffer url
- https://nvd.nist.gov/vuln/detail/CVE-2019-8265 advisory
- https://cert-portal.siemens.com/productcert/pdf/ssa-286838.pdf url
- https://cert-portal.siemens.com/productcert/pdf/ssa-940818.pdf url
- https://us-cert.cisa.gov/ics/advisories/icsa-21-131-11 url
- https://www.us-cert.gov/ics/advisories/icsa-20-161-06 url