CVE-2016-8703

Heap-based buffer overflow in the bmreadbodybmp function in bitmapio.c in potrace before 1.13 allows remote attackers to have unspecified impact via a crafted BMP image, a different vulnerability than CVE-2016-8698, CVE-2016-8699, CVE-2016-8700, CVE-2016-8701, and CVE-2016-8702...

CVE-2016-8703

Heap-based buffer overflow in the bmreadbodybmp function in bitmapio.c in potrace before 1.13 allows remote attackers to have unspecified impact via a crafted BMP image, a different vulnerability than CVE-2016-8698, CVE-2016-8699, CVE-2016-8700, CVE-2016-8701, and CVE-2016-8702...

CVE-2016-8685

The CVE-2016-8685 issue affects potrace 1.13, where the findnext function in decompose.c processes crafted BMPs to trigger denial of service via invalid memory access/crash. Affected deployments are mitigated by upgrading to patched releases (e.g., potrace 1.14+ as referenced in openSUSE advisori...

CVE-2016-8702

Heap-based buffer overflow in the bmreadbodybmp function in bitmapio.c in potrace before 1.13 allows remote attackers to have unspecified impact via a crafted BMP image, a different vulnerability than CVE-2016-8698, CVE-2016-8699, CVE-2016-8700, CVE-2016-8701, and CVE-2016-8703...

CVE-2016-8702

Potrace vulnerability CVE-2016-8702 affects Potrace where the bm_readbody_bmp function in bitmap_io.c is vulnerable to a heap-based buffer overflow when processing a crafted BMP image. Affected versions are Potrace before 1.13; the issue arises from a flaw in bitmap parsing that can be triggered ...

CVE-2016-8701

CVE-2016-8701 affects Potrace’s bitmap_io.c:bm_readbody_bmp. The issue is a heap-based overflow caused by parsing a crafted BMP image, in Potrace 1.13 and earlier. Nessus/OpenVAS references show this family of issues (noting an incomplete fix for CVE-2016-8698) and describe a heap-based over-read...

CVE-2016-8694

CVE-2016-8694 affects potrace up to version 1.12 via the bm_readbody_bmp function in bitmap_io.c; a crafted BMP image can cause a denial-of-service through a NULL pointer dereference, with impact noted as PARTIAL availability. The issue is resolved in version 1.13 (patched in upstream).

CVE-2016-8695

The bmreadbodybmp function in bitmapio.c in potrace before 1.13 allows remote attackers to cause a denial of service NULL pointer dereference and crash via a crafted BMP image, a different vulnerability than CVE-2016-8694 and CVE-2016-8696...

CVE-2016-8695

CVE-2016-8695 affects potrace prior to 1.13; the bm_readbody_bmp function in bitmap_io.c is vulnerable to a crafted BMP, enabling a NULL pointer dereference and denial of service. The vulnerability is distinct from CVE-2016-8694/8696. Remediation per the public records involves upgrading potrace ...

CVE-2016-8695

The bmreadbodybmp function in bitmapio.c in potrace before 1.13 allows remote attackers to cause a denial of service NULL pointer dereference and crash via a crafted BMP image, a different vulnerability than CVE-2016-8694 and CVE-2016-8696...

CVE-2016-8697

Patched in potrace 1.13+: The bm_new function in bitmap.h of potrace versions before 1.13 is vulnerable to a crafted BMP image that triggers a divide-by-zero error, causing a denial of service (crash). The issue affects potrace’s bitmap handling, leading to remote DoS without explicit exploit det...

CVE-2016-8697

The bmnew function in bitmap.h in potrace before 1.13 allows remote attackers to cause a denial of service divide-by-zero error and crash via a crafted BMP image...

CVE-2016-8685

The findnext function in decompose.c in potrace 1.13 allows remote attackers to cause a denial of service invalid memory access and crash via a crafted BMP image...

CVE-2016-8695

The bmreadbodybmp function in bitmapio.c in potrace before 1.13 allows remote attackers to cause a denial of service NULL pointer dereference and crash via a crafted BMP image, a different vulnerability than CVE-2016-8694 and CVE-2016-8696...

CVE-2016-8697

The bmnew function in bitmap.h in potrace before 1.13 allows remote attackers to cause a denial of service divide-by-zero error and crash via a crafted BMP image...

CVE-2016-8698

Heap-based buffer overflow in the bmreadbodybmp function in bitmapio.c in potrace before 1.13 allows remote attackers to have unspecified impact via a crafted BMP image, a different vulnerability than CVE-2016-8699, CVE-2016-8700, CVE-2016-8701, CVE-2016-8702, and CVE-2016-8703...

CVE-2016-8699

Heap-based buffer overflow in the bmreadbodybmp function in bitmapio.c in potrace before 1.13 allows remote attackers to have unspecified impact via a crafted BMP image, a different vulnerability than CVE-2016-8698, CVE-2016-8700, CVE-2016-8701, CVE-2016-8702, and CVE-2016-8703...

CVE-2016-8702

Heap-based buffer overflow in the bmreadbodybmp function in bitmapio.c in potrace before 1.13 allows remote attackers to have unspecified impact via a crafted BMP image, a different vulnerability than CVE-2016-8698, CVE-2016-8699, CVE-2016-8700, CVE-2016-8701, and CVE-2016-8703...

CVE-2016-8694

The bmreadbodybmp function in bitmapio.c in potrace before 1.13 allows remote attackers to cause a denial of service NULL pointer dereference and crash via a crafted BMP image, a different vulnerability than CVE-2016-8695 and CVE-2016-8696...

CVE-2016-8696

The bmreadbodybmp function in bitmapio.c in potrace before 1.13 allows remote attackers to cause a denial of service NULL pointer dereference and crash via a crafted BMP image, a different vulnerability than CVE-2016-8694 and CVE-2016-8695...