CVE-2016-8699
HighSummary
Heap-based buffer overflow in the bm_readbody_bmp function in bitmap_io.c in potrace before 1.13 allows remote attackers to exploit this via a crafted BMP image.
Risk Assessment
Attackers may exploit this vulnerability to execute remote code or cause other unspecified impacts, posing a threat to the integrity and availability of the system.
Recommendation
It is recommended to update the potrace software to version 1.13 or later to mitigate the risks associated with this vulnerability.
Other vulnerabilities in potrace
See all- CVE-2017-12067High
Potrace version 1.14 has a heap-based buffer over-read vulnerability in the interpolate_cubic function in mkbitmap.c.
- CVE-2017-7263High
The bm_readbody_bmp function in bitmap_io.c in Potrace 1.14 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) or possibly have unspecified other impact via a crafted BMP image.
- CVE-2016-8703High
Heap-based buffer overflow in the bm_readbody_bmp function in bitmap_io.c in potrace before 1.13 allows remote attackers to have unspecified impact via a crafted BMP image.
- CVE-2016-8702High
A heap-based buffer overflow in the bm_readbody_bmp function in bitmap_io.c in potrace before version 1.13 allows remote attackers to exploit it via a crafted BMP image.
- CVE-2016-8701High
A heap-based buffer overflow in the bm_readbody_bmp function in bitmap_io.c in potrace before version 1.13 allows remote attackers to exploit it via a crafted BMP image.
- CVE-2016-8700High
Heap-based buffer overflow in the bm_readbody_bmp function in bitmap_io.c in potrace before 1.13 allows remote attackers to exploit a crafted BMP image.
- CVE-2016-8698High
Heap-based buffer overflow in the bm_readbody_bmp function in bitmap_io.c in potrace before 1.13 allows remote attackers to exploit it via a crafted BMP image.
- CVE-2016-8686High
The bm_new function in bitmap.h in potrace 1.13 allows remote attackers to have unspecified impact via a crafted image, which triggers a memory allocation failure.
Original NVD description (English source)
Heap-based buffer overflow in the bm_readbody_bmp function in bitmap_io.c in potrace before 1.13 allows remote attackers to have unspecified impact via a crafted BMP image, a different vulnerability than CVE-2016-8698, CVE-2016-8700, CVE-2016-8701, CVE-2016-8702, and CVE-2016-8703.