Critical severity9.8NVD Advisory· Published May 23, 2017· Updated May 13, 2026
CVE-2017-9166
CVE-2017-9166
Description
libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer over-read in the GET_COLOR function in color.c:18:11.
Affected products
1- cpe:2.3:a:autotrace_project:autotrace:0.31.1:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/nvdThird Party AdvisoryVDB Entry
News mentions
0No linked articles in our index yet.