How many CVEs have a located fix in LibVNC/libvncserver?

26 published CVEs have a fix traced to functions in LibVNC/libvncserver, touching 17 functions across 20 files.

Which function in LibVNC/libvncserver has been patched by the most CVEs?

rfbProcessFileTransferReadBuffer in libvncserver/rfbserver.c has been changed by 2 CVE fixes, from 2019 to 2019.

How large is a typical CVE fix in LibVNC/libvncserver?

The median fix changes 11 lines. 73% of fixes change 20 lines or fewer, and 54% change a single function.

How is a fix located to a function?

The upstream fix commit for each CVE is fetched and its diff is split into hunks. Each hunk is attributed to the function, method or type it changes, using the definition the diff itself names. Backports of the same fix to stable branches are counted once.

RadicalNotion.AI

Log in Create an account

c

#191 of 500 repositories

LibVNC/libvncserver

Name: LibVNC/libvncserver: functions patched by CVE fixes
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

Functions and files changed by CVE fixes in this repository.

Latest located fix August 21, 2026

26

CVE fixes located

Published CVEs

17

Functions patched

Distinct function sites

20

Files patched

Distinct source files

2016–2026

Years covered

By CVE publication date

Overview

26 published CVEs have a fix traced to functions in LibVNC/libvncserver, the earliest published in 2016. Those fixes changed 17 distinct functions across 20 files, in 163 patch hunks.

Among the 500 repositories tracked here, LibVNC/libvncserver ranks #191 by the number of CVEs with a located fix.

Most patched functions

Functions in LibVNC/libvncserver changed by the most CVE fixes.

Most patched files

Files in LibVNC/libvncserver changed by the most CVE fixes.

1libvncclient/rfbproto.c5 CVEs · 5 functions
2libvncserver/rfbserver.c5 CVEs · 1 functions
3libvncserver/corre.c3 CVEs · 0 functions
4libvncserver/hextile.c3 CVEs · 0 functions
5libvncserver/rre.c3 CVEs · 0 functions
6libvncclient/vncviewer.c2 CVEs · 2 functions
7libvncclient/sockets.c2 CVEs · 1 functions
8libvncclient/ultra.c2 CVEs · 0 functions
9src/libvncclient/tight.c2 CVEs · 0 functions
10libvncserver/websockets.c1 CVEs · 3 functions

Fix size

How much code a CVE fix in LibVNC/libvncserver changes, with backports counted once.

11

Median lines changed

Added plus removed, per CVE

73%

Fixes of 20 lines or fewer

Share of CVE fixes

54%

Fixes in a single function

Share of CVE fixes

Latest CVEs

The most recently published CVEs with a fix located in LibVNC/libvncserver, and the functions each fix changed.

libvncclient Tight decoder has an attacker-controlled heap out-of-bounds write
CVE-2026-50538
High · CVSS 8.8
EPSS 0.4%2026-08-21
LibVNCClient Tight Gradient decoding allows malicious server-triggered heap/stack OOB writes
CVE-2026-44988_rfbClient
High · CVSS 8.8
EPSS 0.4%2026-05-27
LibVNCServer httpd proxy NULL Pointer Dereference
CVE-2026-32854
Medium · CVSS 6.3
EPSS 5.3%2026-03-24
LibVNCServer UltraZip Encoding Heap Out-of-bounds Read
CVE-2026-32853
Medium · CVSS 6.9
EPSS 0.4%2026-03-24
CVE-2020-29260
CVE-2020-29260rfbClientCleanup
High · CVSS 7.5
EPSS 1.1%2022-09-02
CVE-2017-18922
CVE-2017-18922ws_header_data_s ws_ctx_s webSocketsEncodeHixie
Critical · CVSS 9.8
EPSS 2.3%2020-06-30
CVE-2020-14396
CVE-2020-14396
High · CVSS 7.5
EPSS 2.6%2020-06-17
CVE-2020-14397
CVE-2020-14397sraSpanInsertAfter
High · CVSS 7.5
EPSS 3.4%2020-06-17
CVE-2020-14398
CVE-2020-14398_rfbClient rfbGetClient
High · CVSS 7.5
EPSS 2.8%2020-06-17
CVE-2020-14399
CVE-2020-14399
High · CVSS 7.5
EPSS 2.8%2020-06-17
CVE-2020-14400
CVE-2020-14400
High · CVSS 7.5
EPSS 2.8%2020-06-17
CVE-2020-14401
CVE-2020-14401rfbScaledScreenUpdateRect
Medium · CVSS 6.5
EPSS 2.5%2020-06-17

Get an alert for each new LibVNC/libvncserver CVE, with the patched functions and AI-written analysis.

Monitor libvncserver CVEs

Other repositories

Repositories with a similar number of located CVE fixes.

baptisteArno/typebot.io26 CVEs danny-avila/librechat26 CVEs firefly-iii/firefly-iii26 CVEs getkirby/kirby26 CVEs mdadams/jasper26 CVEs moby/moby26 CVEs muttmua/mutt26 CVEs osTicket/osTicket26 CVEs

Browse all repositories

Frequently asked questions

Common questions about CVE fixes in LibVNC/libvncserver.

How many CVEs have a located fix in LibVNC/libvncserver?: 26 published CVEs have a fix traced to functions in LibVNC/libvncserver, touching 17 functions across 20 files.
Which function in LibVNC/libvncserver has been patched by the most CVEs?: rfbProcessFileTransferReadBuffer in libvncserver/rfbserver.c has been changed by 2 CVE fixes, from 2019 to 2019.
How large is a typical CVE fix in LibVNC/libvncserver?: The median fix changes 11 lines. 73% of fixes change 20 lines or fewer, and 54% change a single function.
How is a fix located to a function?: The upstream fix commit for each CVE is fetched and its diff is split into hunks. Each hunk is attributed to the function, method or type it changes, using the definition the diff itself names. Backports of the same fix to stable branches are counted once.

References

Fix locations are computed by RadicalNotion.AI from the upstream patch diff of each CVE. CVE data is sourced from the CVE Program.

Track LibVNC/libvncserver CVEs

Get an alert when a new CVE lands in this repository, with the patched functions and AI-written remediation guidance.

Create an account See pricing