CVE-2017-9166

Critical

Published: 23/05/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

The libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer over-read in the GET_COLOR function in color.c at line 18.

Risk Assessment

An attacker may exploit this vulnerability to read data outside the allocated memory space, potentially leading to the disclosure of sensitive information.

Recommendation

It is recommended to upgrade to a newer version of AutoTrace to mitigate this vulnerability.

Original NVD description (English source)

libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer over-read in the GET_COLOR function in color.c:18:11.