CRITICAL🇵🇱 Wersja polska

CVE-2017-9152

CVSS 9.8v3.0pub. 2017-05-23upd. 2026-05-13

libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer over-read in the pnm_load_raw function in input-pnm.c:346:41.

CVSS Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
  • Autotrace Project Autotrace

    APP
    Autotrace Project
    0.31.1
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2017-9161CRITICAL9.8PL ✓same product

Integer overflow w bibliotece AutoTrace 0.31.1 (autotrace.c)

CVE-2017-9151CRITICAL9.8PL ✓same product

AutoTrace 0.31.1 — heap-based buffer overflow w funkcji pnm_load_ascii

CVE-2017-9153CRITICAL9.8PL ✓same product

Heap-based buffer overflow w AutoTrace — funkcja pnm_load_rawpbm

CVE-2017-9160CRITICAL9.8PL ✓same product

Stack-based buffer overflow w AutoTrace 0.31.1 (input-pnm.c)

CVE-2017-9162CRITICAL9.8PL ✓same product

Przepełnienie liczby całkowitej (integer overflow) w AutoTrace 0.31.1