CVE-2016-8697

The bmnew function in bitmap.h in potrace before 1.13 allows remote attackers to cause a denial of service divide-by-zero error and crash via a crafted BMP image...

CVE-2016-8695

The bmreadbodybmp function in bitmapio.c in potrace before 1.13 allows remote attackers to cause a denial of service NULL pointer dereference and crash via a crafted BMP image, a different vulnerability than CVE-2016-8694 and CVE-2016-8696...

CVE-2016-8702

Heap-based buffer overflow in the bmreadbodybmp function in bitmapio.c in potrace before 1.13 allows remote attackers to have unspecified impact via a crafted BMP image, a different vulnerability than CVE-2016-8698, CVE-2016-8699, CVE-2016-8700, CVE-2016-8701, and CVE-2016-8703...

CVE-2016-8694

The bmreadbodybmp function in bitmapio.c in potrace before 1.13 allows remote attackers to cause a denial of service NULL pointer dereference and crash via a crafted BMP image, a different vulnerability than CVE-2016-8695 and CVE-2016-8696...

CVE-2016-8703

Heap-based buffer overflow in the bmreadbodybmp function in bitmapio.c in potrace before 1.13 allows remote attackers to have unspecified impact via a crafted BMP image, a different vulnerability than CVE-2016-8698, CVE-2016-8699, CVE-2016-8700, CVE-2016-8701, and CVE-2016-8702...

CVE-2016-8700

CVE-2016-8700 is a heap-based buffer overflow in Potrace’s bm_readbody_bmp function (bitmap_io.c). The vulnerability exists in Potrace versions before 1.13 and can be triggered by processing a crafted BMP image, potentially enabling remote impact. The description specifies a heap overflow with un...

CVE-2016-8696

Potrace prior to version 1.13 is affected by CVE-2016-8696 due to the bm_readbody_bmp function in bitmap_io.c, which allows remote attackers to trigger a denial of service (NULL pointer dereference and crash) via a crafted BMP image. This is a separate issue from CVE-2016-8694 and CVE-2016-8695. ...

CVE-2016-8694

CVE-2016-8694 affects potrace up to version 1.12 via the bm_readbody_bmp function in bitmap_io.c; a crafted BMP image can cause a denial-of-service through a NULL pointer dereference, with impact noted as PARTIAL availability. The issue is resolved in version 1.13 (patched in upstream).

CVE-2016-8697

The bmnew function in bitmap.h in potrace before 1.13 allows remote attackers to cause a denial of service divide-by-zero error and crash via a crafted BMP image...

CVE-2016-8702

Heap-based buffer overflow in the bmreadbodybmp function in bitmapio.c in potrace before 1.13 allows remote attackers to have unspecified impact via a crafted BMP image, a different vulnerability than CVE-2016-8698, CVE-2016-8699, CVE-2016-8700, CVE-2016-8701, and CVE-2016-8703...

CVE-2016-8703

Heap-based buffer overflow in the bmreadbodybmp function in bitmapio.c in potrace before 1.13 allows remote attackers to have unspecified impact via a crafted BMP image, a different vulnerability than CVE-2016-8698, CVE-2016-8699, CVE-2016-8700, CVE-2016-8701, and CVE-2016-8702...

CVE-2016-8699

Heap-based buffer overflow in the bmreadbodybmp function in bitmapio.c in potrace before 1.13 allows remote attackers to have unspecified impact via a crafted BMP image, a different vulnerability than CVE-2016-8698, CVE-2016-8700, CVE-2016-8701, CVE-2016-8702, and CVE-2016-8703...

CVE-2016-8697

Patched in potrace 1.13+: The bm_new function in bitmap.h of potrace versions before 1.13 is vulnerable to a crafted BMP image that triggers a divide-by-zero error, causing a denial of service (crash). The issue affects potrace’s bitmap handling, leading to remote DoS without explicit exploit det...

CVE-2016-8685

The CVE-2016-8685 issue affects potrace 1.13, where the findnext function in decompose.c processes crafted BMPs to trigger denial of service via invalid memory access/crash. Affected deployments are mitigated by upgrading to patched releases (e.g., potrace 1.14+ as referenced in openSUSE advisori...

CVE-2016-8694

The bmreadbodybmp function in bitmapio.c in potrace before 1.13 allows remote attackers to cause a denial of service NULL pointer dereference and crash via a crafted BMP image, a different vulnerability than CVE-2016-8695 and CVE-2016-8696...

CVE-2016-8701

Heap-based buffer overflow in the bmreadbodybmp function in bitmapio.c in potrace before 1.13 allows remote attackers to have unspecified impact via a crafted BMP image, a different vulnerability than CVE-2016-8698, CVE-2016-8699, CVE-2016-8700, CVE-2016-8702, and CVE-2016-8703...

CVE-2016-8696

The bmreadbodybmp function in bitmapio.c in potrace before 1.13 allows remote attackers to cause a denial of service NULL pointer dereference and crash via a crafted BMP image, a different vulnerability than CVE-2016-8694 and CVE-2016-8695...

CVE-2017-5563

LibTIFF version 4.0.7 is vulnerable to a heap-based buffer over-read in tiflzw.c resulting in DoS or code execution via a crafted bmp image to tools/bmp2tiff...

Heap overflow

LibTIFF version 4.0.7 is vulnerable to a heap-based buffer over-read in tiflzw.c resulting in DoS or code execution via a crafted bmp image to tools/bmp2tiff...

CVE-2017-5563

LibTIFF version 4.0.7 is vulnerable to a heap-based buffer over-read in tiflzw.c resulting in DoS or code execution via a crafted bmp image to tools/bmp2tiff...