CVE-2016-8686
HighSummary
The bm_new function in bitmap.h in potrace 1.13 allows remote attackers to have unspecified impact via a crafted image, which triggers a memory allocation failure.
Risk Assessment
Attackers may exploit this vulnerability to destabilize the system, potentially leading to service interruptions or data loss.
Recommendation
It is recommended to update to the latest version of potrace to mitigate the risks associated with this vulnerability.
Other vulnerabilities in potrace 1.13
See all- CVE-2017-12067High
Potrace version 1.14 has a heap-based buffer over-read vulnerability in the interpolate_cubic function in mkbitmap.c.
- CVE-2017-7263High
The bm_readbody_bmp function in bitmap_io.c in Potrace 1.14 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) or possibly have unspecified other impact via a crafted BMP image.
- CVE-2016-8703High
Heap-based buffer overflow in the bm_readbody_bmp function in bitmap_io.c in potrace before 1.13 allows remote attackers to have unspecified impact via a crafted BMP image.
- CVE-2016-8702High
A heap-based buffer overflow in the bm_readbody_bmp function in bitmap_io.c in potrace before version 1.13 allows remote attackers to exploit it via a crafted BMP image.
- CVE-2016-8701High
A heap-based buffer overflow in the bm_readbody_bmp function in bitmap_io.c in potrace before version 1.13 allows remote attackers to exploit it via a crafted BMP image.
- CVE-2016-8700High
Heap-based buffer overflow in the bm_readbody_bmp function in bitmap_io.c in potrace before 1.13 allows remote attackers to exploit a crafted BMP image.
- CVE-2016-8699High
Heap-based buffer overflow in the bm_readbody_bmp function in bitmap_io.c in potrace before 1.13 allows remote attackers to exploit this via a crafted BMP image.
- CVE-2016-8698High
Heap-based buffer overflow in the bm_readbody_bmp function in bitmap_io.c in potrace before 1.13 allows remote attackers to exploit it via a crafted BMP image.
Original NVD description (English source)
The bm_new function in bitmap.h in potrace 1.13 allows remote attackers to have unspecified impact via a crafted image, which triggers a memory allocation failure.