Autotrace Project: >> Autotrace Security Vulnerabilities
libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in input-bmp.c:314:7.
CVSS Score
9.8
EPSS Score
0.004
Published
2017-05-23
libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in input-bmp.c:319:7.
CVSS Score
9.8
EPSS Score
0.004
Published
2017-05-23
libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in input-bmp.c:326:17.
CVSS Score
9.8
EPSS Score
0.004
Published
2017-05-23
libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in input-bmp.c:486:7.
CVSS Score
9.8
EPSS Score
0.004
Published
2017-05-23
libautotrace.a in AutoTrace 0.31.1 has a "left shift ... cannot be represented in type int" issue in input-bmp.c:516:63.
CVSS Score
9.8
EPSS Score
0.004
Published
2017-05-23
libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid read and application crash), related to the GET_COLOR function in color.c:16:11.
CVSS Score
7.5
EPSS Score
0.007
Published
2017-05-23
libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid free), related to the free_bitmap function in bitmap.c:24:5.
CVSS Score
7.5
EPSS Score
0.007
Published
2017-05-23
libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the rle_fread function in input-tga.c:252:15.
CVSS Score
9.8
EPSS Score
0.005
Published
2017-05-23
libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the pnm_load_ascii function in input-pnm.c:303:12.
CVSS Score
9.8
EPSS Score
0.005
Published
2017-05-23
libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer over-read in the pnm_load_raw function in input-pnm.c:346:41.
CVSS Score
9.8
EPSS Score
0.004
Published
2017-05-23