CVE-2017-9165

libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer over-read in the GETCOLOR function in color.c:17:11...

CVE-2017-9194

CVE-2017-9194 affects AutoTrace 0.31.1 (libautotrace.a). A heap-based buffer over-read exists in the ReadImage function (input-tga.c:559:29). CVSS data in the initial entry flags a network attack vector with no authentication and partial confidentiality/integrity/availability impact (base scores ...

CVE-2017-9195

CVE-2017-9195 affects AutoTrace, with libautotrace.a in AutoTrace 0.31.1 exhibiting a heap-based buffer over-read in ReadImage (input-tga.c:620:27). This CVE is corroborated across multiple sources (NVD, Red Hat advisories, SUSE). Exploitation details, affected products beyond AutoTrace 0.31.1, a...

CVE-2017-9154

CVE-2017-9154 affects AutoTrace 0.31.1: libautotrace.a has a flaw in the GET_COLOR function (color.c:16:11) that enables remote attackers to cause a denial of service via invalid reads and a SEGV. Several sources corroborate the issue in AutoTrace 0.31.1 and describe it as a denial of service. Th...

CVE-2017-9157

libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service invalid write and SEGV, related to the pnmloadascii function in input-pnm.c:306:14...

CVE-2017-9191

CVE-2017-9191 affects AutoTrace 0.31.1: libautotrace.a contains a heap-based buffer overflow in rle_fread (input-tga.c:252:15). Multiple sources (CNVD, Red Hat, SUSE, NVD) describe potential arbitrary code execution or denial of service via crafted bitmap (TGA) files. Public exploit status isn’t ...

CVE-2017-9173

CVE-2017-9173 affects AutoTrace 0.31.1: libautotrace.a (ReadImage in input-bmp.c:497:29) contains a heap-based buffer overflow. Exploitation could lead to arbitrary code execution or a denial of service. The connected documents (RH/NVD/CNVD/SUSE/PT/security feeds) confirm the issue but provide no...

CVE-2017-9167

CVE-2017-9167 affects AutoTrace 0.31.1 (libautotrace.a). A heap-based buffer overflow is caused by ReadImage in input-bmp.c:337:25, which can lead to arbitrary code execution or denial of service as described in CNVD/NVD entries. No patch/version remediation details are provided in the supplied d...

CVE-2017-9184

libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in input-bmp.c:314:7...

CVE-2017-9193

CVE-2017-9193 affects AutoTrace 0.31.1’s libautotrace.a; a heap-based buffer over-read occurs in ReadImage (input-tga.c:538:33). CVSS v2/3 scores indicate HIGH/CRITICAL impact (network, no auth, no user interaction). Affected product is AutoTrace; no patch/version fix details are provided in the ...

CVE-2017-9157

CVE-2017-9157 affects AutoTrace 0.31.1 via library libautotrace.a. The vulnerability is in input-pnm.c at 306:14 (pnm_load_ascii) and can allow a remote attacker to cause a denial of service (invalid write and SEGV). Documents confirm the component and impact but do not provide patch/version info...

CVE-2017-9152

libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer over-read in the pnmloadraw function in input-pnm.c:346:41...

CVE-2017-9180

CVE-2017-9180 affects AutoTrace 0.31.1: libautotrace.a vulnerable via ReadImage in input-bmp.c:440:14, enabling remote denial of service through an invalid read/SEGV. Details consistently point to the bitmap-reading path (input-bmp.c) as the root cause. No public patch/version remediation details...

CVE-2017-9187

CVE-2017-9187 affects AutoTrace 0.31.1: libautotrace.a has a bug in input-bmp.c:486:7 described as a “cannot be represented in type int” issue. The vulnerability relates to bitmap processing in the autotrace codebase (input-bmp.c) and is documented across multiple sources (NVD, Red Hat advisories...

CVE-2017-9195

libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer over-read in the ReadImage function in input-tga.c:620:27...

CVE-2017-9190

libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service invalid free, related to the freebitmap function in bitmap.c:24:5...

CVE-2017-9165

CVE-2017-9165 affects AutoTrace 0.31.1: the heap-based buffer over-read occurs in libautotrace.a, specifically the GET_COLOR function in color.c:17:11. Multiple sources (NVD/Red Hat/SUSE, Nessus plugins, CNVD, PT Security) consistently describe a heap over-read/overflow scenario in the color load...

CVE-2017-9198

CVE-2017-9198 affects AutoTrace 0.31.1: libautotrace.a contains a bug in input-tga.c at line 508:18 described as a “cannot be represented in type int” issue. The connected documents consistently reference this exact file/line and the underlying integer representation problem. There is no explicit...

CVE-2017-9179

libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service invalid read and SEGV, related to the ReadImage function in input-bmp.c:425:14...

CVE-2017-9163

CVE-2017-9163 affects AutoTrace 0.31.1 (libautotrace.a) with a flaw in pxl-outline.c:106:54 where a value cannot be represented in type int. Public sources consolidate this as a denial-of-service/overflow-related issue in the bitmap-to-vector conversion path. Related advisories confirm the vulner...