CVE Catalog
CVE-2017-9195
CriticalSummary
The libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer over-read in the ReadImage function in input-tga.c at line 620.
Risk Assessment
An attacker may exploit this vulnerability to read data outside the allocated buffer, potentially leading to the disclosure of sensitive information.
Recommendation
It is recommended to upgrade to a newer version of AutoTrace to mitigate this vulnerability.
Original NVD description (English source)
libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer over-read in the ReadImage function in input-tga.c:620:27.