Vulnerabilities

Autotrace Project Autotrace 0.31.1

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

54CVEs

CVE-2017-9153

libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the pnm_load_rawpbm function in input-pnm.c:391:13.

Published 2017-05-23 · Modified

9.8EPSS 0.025

CVE-2017-9188

libautotrace.a in AutoTrace 0.31.1 has a "left shift ... cannot be represented in type int" issue in input-bmp.c:516:63.

Published 2017-05-23 · Modified

9.8EPSS 0.023

CVE-2017-9200

libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in input-tga.c:528:63.

Published 2017-05-23 · Modified

9.8EPSS 0.023

CVE-2017-9162

libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in autotrace.c:191:2.

Published 2017-05-23 · Modified

9.8EPSS 0.022

CVE-2017-9171

libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer over-read in the ReadImage function in input-bmp.c:492:24.

Published 2017-05-23 · Modified

9.8EPSS 0.022

CVE-2017-9170

libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the ReadImage function in input-bmp.c:370:25.

Published 2017-05-23 · Modified

9.8EPSS 0.021

CVE-2017-9152

libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer over-read in the pnm_load_raw function in input-pnm.c:346:41.

Published 2017-05-23 · Modified

9.8EPSS 0.021

CVE-2017-9151

libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the pnm_load_ascii function in input-pnm.c:303:12.

Published 2017-05-23 · Modified

9.8EPSS 0.020

CVE-2017-9183

libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in input-bmp.c:309:7.

Published 2017-05-23 · Modified

9.8EPSS 0.019

CVE-2017-9186

libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in input-bmp.c:326:17.

Published 2017-05-23 · Modified

9.8EPSS 0.019

CVE-2017-9187

libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in input-bmp.c:486:7.

Published 2017-05-23 · Modified

9.8EPSS 0.019

CVE-2017-9198

libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in input-tga.c:508:18.

Published 2017-05-23 · Modified

9.8EPSS 0.019

CVE-2017-9199

libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in input-tga.c:192:19.

Published 2017-05-23 · Modified

9.8EPSS 0.019

CVE-2017-9185

libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in input-bmp.c:319:7.

Published 2017-05-23 · Modified

9.8EPSS 0.019

CVE-2017-9164

libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer over-read in the GET_COLOR function in color.c:16:11.

Published 2017-05-23 · Modified

9.8EPSS 0.019

CVE-2017-9197

libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in input-tga.c:498:55.

Published 2017-05-23 · Modified

9.8EPSS 0.019

CVE-2017-9184

libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in input-bmp.c:314:7.

Published 2017-05-23 · Modified

9.8EPSS 0.019

CVE-2017-9166

libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer over-read in the GET_COLOR function in color.c:18:11.

Published 2017-05-23 · Modified

9.8EPSS 0.019

CVE-2017-9165

libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer over-read in the GET_COLOR function in color.c:17:11.

Published 2017-05-23 · Modified

9.8EPSS 0.019

CVE-2017-9194

libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer over-read in the ReadImage function in input-tga.c:559:29.

Published 2017-05-23 · Modified

9.8EPSS 0.019

CVE-2017-9161

libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in autotrace.c:188:23.

Published 2017-05-23 · Modified

9.8EPSS 0.019

CVE-2017-9195

libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer over-read in the ReadImage function in input-tga.c:620:27.

Published 2017-05-23 · Modified

9.8EPSS 0.019

CVE-2017-9193

libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer over-read in the ReadImage function in input-tga.c:538:33.

Published 2017-05-23 · Modified

9.8EPSS 0.019

CVE-2017-9167

libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the ReadImage function in input-bmp.c:337:25.

Published 2017-05-23 · Modified

9.8EPSS 0.019

CVE-2017-9172

libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the ReadImage function in input-bmp.c:496:29.

Published 2017-05-23 · Modified

9.8EPSS 0.019

CVE-2017-9173

libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the ReadImage function in input-bmp.c:497:29.

Published 2017-05-23 · Modified

9.8EPSS 0.019

CVE-2017-9169

libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the ReadImage function in input-bmp.c:355:25.

Published 2017-05-23 · Modified

9.8EPSS 0.019

CVE-2017-9168

libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the ReadImage function in input-bmp.c:353:25.

Published 2017-05-23 · Modified

9.8EPSS 0.019

CVE-2017-9196

libautotrace.a in AutoTrace 0.31.1 has a "negative-size-param" issue in the ReadImage function in input-tga.c:528:7.

Published 2017-05-23 · Modified

9.8EPSS 0.018

CVE-2017-9163

libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in pxl-outline.c:106:54.

Published 2017-05-23 · Modified

9.8EPSS 0.018

CVE-2017-9191

libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the rle_fread function in input-tga.c:252:15.

Published 2017-05-23 · Modified

9.8EPSS 0.018

CVE-2017-9160

libautotrace.a in AutoTrace 0.31.1 has a stack-based buffer overflow in the pnmscanner_gettoken function in input-pnm.c:458:12.

Published 2017-05-23 · Modified

9.8EPSS 0.018

CVE-2017-9192

libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the ReadImage function in input-tga.c:528:7.

Published 2017-05-23 · Modified

9.8EPSS 0.018

CVE-2019-19005

A bitmap double free in main.c in autotrace 0.31.1 allows attackers to cause an unspecified impact via a malformed bitmap image. This may occur after the use-after-free in CVE-2017-9182.

Published 2021-02-11 · Modified

7.8EPSS 0.010

CVE-2017-9190

libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid free), related to the free_bitmap function in bitmap.c:24:5.

Published 2017-05-23 · Modified

7.5EPSS 0.025

CVE-2017-9181

libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid write and SEGV), related to the ReadImage function in input-bmp.c.

Published 2017-05-23 · Modified

7.5EPSS 0.024

CVE-2017-9154

libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid read and SEGV), related to the GET_COLOR function in color.c:16:11.

Published 2017-05-23 · Modified

7.5EPSS 0.023

CVE-2017-9182

libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (use-after-free and invalid heap read), related to the GET_COLOR function in color.c:16:11.

Published 2017-05-23 · Modified

7.5EPSS 0.022

CVE-2017-9180

libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid read and SEGV), related to the ReadImage function in input-bmp.c:440:14.

Published 2017-05-23 · Modified

7.5EPSS 0.022

CVE-2017-9156

libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid write and SEGV), related to the pnm_load_ascii function in input-pnm.c:303:12.

Published 2017-05-23 · Modified

7.5EPSS 0.020

Autotrace Project Autotrace 0.31.1

Security check