CVE-2017-9171

Critical

Published: 23/05/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

The libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer over-read in the ReadImage function in input-bmp.c at line 492.

Risk Assessment

An attacker may exploit this vulnerability to read data outside the allocated memory area, potentially leading to the disclosure of sensitive information.

Recommendation

It is recommended to upgrade to a newer version of AutoTrace to mitigate this vulnerability.

Original NVD description (English source)

libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer over-read in the ReadImage function in input-bmp.c:492:24.