Potrace Project Potrace 1.14

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:potrace_project:potrace:1.14:*:*:*:*:*:*:*

part: a version: 1.14 update: *

VendorPotrace Project (14b83499-0274-5169-bba1-2a6298c4165c)
ProductPotrace (9ebdc372-2838-5ef4-a0d7-12b9f5e07b0c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/potrace purl2cpe 2026-06-01 10:12:40.129029
pkg:deb/ubuntu/potrace purl2cpe 2026-06-01 10:12:40.129031
pkg:gitlab/redhat/potrace purl2cpe 2026-06-01 10:12:40.129032
pkg:rpm/fedora/potrace purl2cpe 2026-06-01 10:12:40.129033
pkg:rpm/opensuse/potrace purl2cpe 2026-06-01 10:12:40.129035
pkg:sourceforge/potrace purl2cpe 2026-06-01 10:12:40.129036

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-7263 vulnerable 2026-06-08 05:09:55.572774 Details available
The bm_readbody_bmp function in bitmap_io.c in Potrace 1.14 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) or possibly have unspecified other impact via a crafted BMP image. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-8698.
Published: 2017-03-26T05:47:00.000Z
Updated: 2024-08-05T15:56:36.294Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-12067 vulnerable 2026-06-08 05:08:38.689939 Details available
Potrace 1.14 has a heap-based buffer over-read in the interpolate_cubic function in mkbitmap.c.
Published: 2017-08-01T05:00:00.000Z
Updated: 2024-08-05T18:28:15.946Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.