Autotrace Project vulnerabilities

By year

Bars are flaws published each year; the red part is the share attackers have used.

Latest high and critical flaws

• CVE-2022-32323 AutoTrace v0.40.0 was discovered to contain a heap overflow via the ReadImage function at input-bmp.c:660.High 7.3 · Jul 14, 2022
• CVE-2019-19005 A bitmap double free in main.c in autotrace 0.31.1 allows attackers to cause an unspecified impact via a malformed bitmap image.High 7.8 · Feb 11, 2021
• CVE-2017-9200 libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in input-tga.c:528:63.Critical 9.8 · May 23, 2017
• CVE-2017-9199 libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in input-tga.c:192:19.Critical 9.8 · May 23, 2017
• CVE-2017-9198 libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in input-tga.c:508:18.Critical 9.8 · May 23, 2017
• CVE-2017-9197 libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in input-tga.c:498:55.Critical 9.8 · May 23, 2017
• CVE-2017-9196 libautotrace.a in AutoTrace 0.31.1 has a "negative-size-param" issue in the ReadImage function in input-tga.c:528:7.Critical 9.8 · May 23, 2017
• CVE-2017-9195 libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer over-read in the ReadImage function in input-tga.c:620:27.Critical 9.8 · May 23, 2017
• CVE-2017-9194 libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer over-read in the ReadImage function in input-tga.c:559:29.Critical 9.8 · May 23, 2017
• CVE-2017-9193 libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer over-read in the ReadImage function in input-tga.c:538:33.Critical 9.8 · May 23, 2017
• CVE-2017-9192 libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the ReadImage function in input-tga.c:528:7.Critical 9.8 · May 23, 2017
• CVE-2017-9191 libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the rle_fread function in input-tga.c:252:15.Critical 9.8 · May 23, 2017
• CVE-2017-9190 libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid free), related to the free_bitmap function in bitmap.c:24:5.High 7.5 · May 23, 2017
• CVE-2017-9189 libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid read and application crash), related to the GET_COLOR function High 7.5 · May 23, 2017
• CVE-2017-9188 libautotrace.a in AutoTrace 0.31.1 has a "left shift ...Critical 9.8 · May 23, 2017
• CVE-2017-9187 libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in input-bmp.c:486:7.Critical 9.8 · May 23, 2017
• CVE-2017-9186 libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in input-bmp.c:326:17.Critical 9.8 · May 23, 2017
• CVE-2017-9185 libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in input-bmp.c:319:7.Critical 9.8 · May 23, 2017
• CVE-2017-9184 libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in input-bmp.c:314:7.Critical 9.8 · May 23, 2017
• CVE-2017-9183 libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in input-bmp.c:309:7.Critical 9.8 · May 23, 2017
• CVE-2017-9182 libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (use-after-free and invalid heap read), related to the GET_COLOR functioHigh 7.5 · May 23, 2017
• CVE-2017-9181 libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid write and SEGV), related to the ReadImage function in input-bmpHigh 7.5 · May 23, 2017
• CVE-2017-9180 libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid read and SEGV), related to the ReadImage function in input-bmp.High 7.5 · May 23, 2017
• CVE-2017-9179 libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid read and SEGV), related to the ReadImage function in input-bmp.High 7.5 · May 23, 2017
• CVE-2017-9178 libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid write and SEGV), related to the ReadImage function in input-bmpHigh 7.5 · May 23, 2017