libvncclient/sockets.c in LibVNCServer before 0.9.13 has a buffer overflow via a long socket filename.
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2019-20839.json"