libvncclient/sockets.c in LibVNCServer before 0.9.13 has a buffer overflow via a long socket filename.
No related bugs.