CVE-2019-15691

CVE-2019-15691 is a stack use-after-return vulnerability in TigerVNC versions prior to 1.10.1, affecting products like openSUSE Leap and TigerVNC. This flaw allows an attacker to achieve remote code execution by sending specially crafted network traffic, exploiting incorrect stack memory handling in the ZRLEDecoder. With a CVSS score of 7.2 (HIGH), it requires high privileges for exploitation but has a low attack complexity and can lead to complete compromise of confidentiality, integrity, and availability. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.