A biWidth*biBitCnt integer overflow in input-bmp.c in autotrace 0.31.1 allows attackers to provide an unexpected input value to malloc via a malformed bitmap image.
| Software | From | Fixed in |
|---|---|---|
| fedoraproject / fedora | 34 | 34.x |
| autotrace_project / autotrace | 0.31.1 | 0.31.1.x |