CVE-2017-9193

Critical

Published: 23/05/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

The libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer over-read in the ReadImage function in input-tga.c at line 538.

Risk Assessment

An attacker could exploit this vulnerability to read data beyond the allocated buffer, potentially leading to the disclosure of sensitive information.

Recommendation

It is recommended to upgrade to a newer version of AutoTrace to mitigate this vulnerability.

Original NVD description (English source)

libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer over-read in the ReadImage function in input-tga.c:538:33.