CVE-2026-107611 | GlavSoft TightVNC up to 2.8.87 ZRLE decoder readPaletteRleTile out-of-bounds

A vulnerability was found in GlavSoft TightVNC up to 2.8.87. It has been declared as critical. The impacted element is the function readPaletteRleTile of the component ZRLE decoder. Such manipulation leads to out-of-bounds read.

This vulnerability is referenced as CVE-2026-107611. It is possible to launch the attack remotely. No exploit is available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More