Related Vulnerabilities: CVE-2022-32323  

AutoTrace v0.40.0 was discovered to contain a heap overflow via the ReadImage function at input-bmp.c:660.

Description

The MITRE CVE dictionary describes this issue as:

AutoTrace v0.40.0 was discovered to contain a heap overflow via the ReadImage function at input-bmp.c:660.

Additional Information

  • Bugzilla 2107471: CVE-2022-32323 autotrace: heap-buffer overflow via the ReadImage() at input-bmp.c
  • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
  • FAQ: Frequently asked questions about CVE-2022-32323