SUSE CVE-2017-9172

libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the ReadImage function in input-bmp.c:496:29...

CVE-2017-9187

CVE-2017-9187 affects AutoTrace 0.31.1: libautotrace.a has a bug in input-bmp.c:486:7 described as a “cannot be represented in type int” issue. The vulnerability relates to bitmap processing in the autotrace codebase (input-bmp.c) and is documented across multiple sources (NVD, Red Hat advisories...