CVE-2017-9165

Critical

Published: 23/05/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

The libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer over-read in the GET_COLOR function in color.c at line 17.

An attacker may exploit this vulnerability to read data outside the allocated buffer, potentially leading to the disclosure of sensitive information.

It is recommended to upgrade to a newer version of AutoTrace to mitigate this vulnerability.

Original NVD description (English source)

libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer over-read in the GET_COLOR function in color.c:17:11.