CVE-2017-5581: Tigervnc

Critical severity, CVSS 9.8. EPSS: 4.2% chance of exploitation in the next 30 days.

Buffer overflow in the ModifiablePixelBuffer::fillRect function in TigerVNC before 1.7.1 allows remote servers to execute arbitrary code via an RRE message with subrectangle outside framebuffer boundaries.

Affected products

• Tigervnc Tigervnc: up to and including 1.7

Published 2017-02-28. Last modified 2026-06-17.