CVE-2017-9164

Critical

Published: 23/05/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

The libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer over-read in the GET_COLOR function in color.c at line 16.

Risk Assessment

Exploitation of this vulnerability may lead to unauthorized memory access, potentially resulting in the disclosure of sensitive data or application instability.

Recommendation

It is recommended to update AutoTrace to the latest version to mitigate this vulnerability and to monitor systems for potential exploitation attempts.

Original NVD description (English source)

libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer over-read in the GET_COLOR function in color.c:16:11.