Logo
›
›vulnerability›CVE-2026-32854
Name
CVE-2026-32854
Source
NVD ( link)Debian ( link)
Description
LibVNCServer versions 0.9.15 and prior (fixed in commit dc78dee) contain null pointer dereference vulnerabilities in the HTTP proxy handlers within httpProcessInput() in httpd.c that allow remote attackers to cause a denial of service by sending specially crafted HTTP requests. Attackers can exploit missing validation of strchr() return values in the CONNECT and GET proxy handling paths to trigger null pointer dereferences and crash the server when httpd and proxy features are enabled.
CWEs
CWE-476
Published Date
Updated Date
Workaround
-
Advisories
https://github.com/LibVNC/libvncserver/commit/dc78dee51a7e270e537a541a17befdf2073f5314Patch
https://github.com/LibVNC/libvncserver/security/advisories/GHSA-xjp8-4qqv-5x4xExploit
https://www.vulncheck.com/advisories/libvncserver-httpd-proxy-null-pointer-dereferenceThird Party Advisory

Analysis#

Affected Component
Analysis
libvncserver
Patched

Vulnerability Ratings#

6.3
CVSSv4
7.5
CVSSv31
NaN
other

Others affected components#

Name
Project
Project Version
Version
Status
libvncserver
buildroot
2025.02.x
0.9.14
Patched
libvncserver
yocto
kirkstone
0.9.13
Exploitable
libvncserver
yocto
master
0.9.15
Not Affected
libvncserver
yocto
scarthgap
0.9.14
Patched

Resolved with patches#

libvncserver (buildroot:2025.02.x)

#
Title
Author
Resolve
1
libvncserver: fix NULL pointer dereferences in httpd proxy
Kazuma Matsumoto <269371721+y637F9QQ2x@users.noreply.github.com>
CVE-2026-32854

libvncserver (buildroot:master)

#
Title
Author
Resolve
1
libvncserver: fix NULL pointer dereferences in httpd proxy
Kazuma Matsumoto <269371721+y637F9QQ2x@users.noreply.github.com>
CVE-2026-32854

libvncserver (yocto:scarthgap)

#
Title
Author
Resolve
1
libvncserver: fix NULL pointer dereferences in httpd proxy
Kazuma Matsumoto <269371721+y637F9QQ2x@users.noreply.github.com>
CVE-2026-32854