VYPR
← All advisories
Unrated severityNVD Advisory· Published Jun 17, 2020· Updated Aug 4, 2024

CVE-2020-14400

CVE-2020-14400

Description

An issue was discovered in LibVNCServer before 0.9.13. Byte-aligned data is accessed through uint16_t pointers in libvncserver/translate.c. NOTE: Third parties do not consider this to be a vulnerability as there is no known path of exploitation or cross of a trust boundary

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

LibVNCServer before 0.9.13 has a potential alignment issue in translate.c, but no known exploitation path.

Vulnerability

LibVNCServer before version 0.9.13 contains a potential misaligned memory access in libvncserver/translate.c, where byte-aligned data is accessed through uint16_t pointers [1]. This can cause undefined behavior on some architectures.

Exploitation

According to the available references, there is no known path of exploitation or trust boundary crossing [1]. The issue is considered not exploitable by the vendor.

Impact

No impact is known due to the absence of a valid exploitation scenario; thus, no security impact is expected.

Mitigation

The issue was fixed in version 0.9.13 via commit 53073c8d7e232151ea2ecd8a1243124121e10e2d [1]. Users should upgrade to 0.9.13 or later.

References
  1. byte-aligned data is accessed through uint16_t pointers in libvncserver/translate.c

AI Insight generated on May 27, 2026. Synthesized from this CVE's description and the cited reference URLs; citations are validated against the source bundle.

Affected products

27

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

9

News mentions

0

No linked articles in our index yet.