Arjun Basnet from Securin

Uncontrolled recursion in the DCMTK bundled XML parser allows denial of service

Heap out-of-bounds read in DCMTK RLE decodeFrame()

Uncontrolled recursion in DCMTK DICOMDIR parsing allows denial of service

Uncontrolled recursion in DCMTK JSON reader allows denial of service

Global buffer out-of-bounds read in DCMTK JPEG Huffman decoding

Out-of-bounds read in TightVNC Viewer ZRLE palette decoding

World-accessible IPC shared memory with predictable name in TightVNC Server

NULL pointer dereference in TightVNC Server Win8ScreenDriver after failed DXGI re-initialization

Integer underflow in TightVNC Server cursor shape trimming leads to out-of-bounds read

DLL search order hijacking via screenhooks libraries in TightVNC Server