CVE-2017-12067

Potrace 1.14 has a heap-based buffer over-read in the interpolatecubic function in mkbitmap.c...