critical9.8
CVE-2017-9171
libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer over-read in the ReadImage function in input-bmp.c:492:24.
Impact
libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer over-read in the ReadImage function in input-bmp.c:492:24.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Autotrace Project | Autotrace | Version 0.31.1 |