Critical severity9.8NVD Advisory· Published Mar 8, 2019· Updated Jun 17, 2026

CVE-2019-8280

Description

UltraVNC revision 1203 has out-of-bounds access vulnerability in VNC client inside RAW decoder, which can potentially result code execution. This attack appear to be exploitable via network connectivity. This vulnerability has been fixed in revision 1204.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Uvnc/Ultravnc
cpe:2.3:a:uvnc:ultravnc:*:*:*:*:*:*:*:*
Range: <1.2.2.3
Ultravnc/Ultravncllm-fuzzy
Range: = revision 1203
Kaspersky Lab/UltraVNCv5
Range: 1.2.2.3

Patches

Vulnerability mechanics

References

ics-cert.kaspersky.com/advisories/klcert-advisories/2019/03/01/klcert-19-009-ultravnc-access-of-memory-location-after-end-of-buffer/nvdThird Party Advisory
cert-portal.siemens.com/productcert/pdf/ssa-286838.pdfnvd
cert-portal.siemens.com/productcert/pdf/ssa-927095.pdfnvd
cert-portal.siemens.com/productcert/pdf/ssa-940818.pdfnvd
us-cert.cisa.gov/ics/advisories/icsa-21-131-11nvd
www.us-cert.gov/ics/advisories/icsa-20-161-06nvd

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.003
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000