CVE-2013-7437
Multiple integer overflows in potrace 1.11 allow remote attackers to cause a denial of service ...
Multiple integer overflows in potrace 1.11 allow remote attackers to cause a denial of service (crash) via large dimensions in a BMP image, which triggers a buffer overflow.
Exploit likelihood
What each source reports
NVD Score used
Multiple integer overflows in potrace 1.11 allow remote attackers to cause a denial of service (crash) via large dimensions in a BMP image, which triggers a buffer overflow.
- Record
CVE-2013-7437- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-190
- Updated
- 2026-11-02
CVE List No score
Multiple integer overflows in potrace 1.11 allow remote attackers to cause a denial of service (crash) via large dimensions in a BMP image, which triggers a buffer overflow.
- Record
CVE-2013-7437- Updated
- 2026-11-02
EUVDEUVD-2013-7201 No score
Multiple integer overflows in potrace 1.11 allow remote attackers to cause a denial of service (crash) via large dimensions in a BMP image, which triggers a buffer overflow.
- Record
EUVD-2013-7201- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-6fx2-mw65-fcxv No score
Multiple integer overflows in potrace 1.11 allow remote attackers to cause a denial of service ...
Multiple integer overflows in potrace 1.11 allow remote attackers to cause a denial of service (crash) via large dimensions in a BMP image, which triggers a buffer overflow.
- Record
GHSA-6fx2-mw65-fcxv- Weakness
- CWE-190
- Updated
- 2026-11-02
OSV No score
Multiple integer overflows in potrace 1.11 allow remote attackers to cause a denial of service (crash) via large dimensions in a BMP image, which triggers a buffer overflow.
- Record
CVE-2013-7437- Updated
- 2026-11-02
OSVDEBIAN-CVE-2013-7437 No score
Multiple integer overflows in potrace 1.11 allow remote attackers to cause a denial of service (crash) via large dimensions in a BMP image, which triggers a buffer overflow.
- Record
DEBIAN-CVE-2013-7437- Updated
- 2026-11-02
OSVMGASA-2015-0161 No score
Updated potrace packages fix CVE-2013-7437
Updated potrace packages fix security vulnerability:
Multiple integer overflows in potrace 1.11 allow remote attackers to cause a denial of service (crash) via large dimensions in a BMP image, which triggers a buffer overflow (CVE-2013-7437).
- Record
MGASA-2015-0161- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10202-1 No score
libpotrace0-1.13-1.5 on GA media
These are all security issues fixed in the libpotrace0-1.13-1.5 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10202-1- Updated
- 2026-11-02
OSVUBUNTU-CVE-2013-7437 No score
Multiple integer overflows in potrace 1.11 allow remote attackers to cause a denial of service (crash) via large dimensions in a BMP image, which triggers a buffer overflow.
- Record
UBUNTU-CVE-2013-7437- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
potraceDebian:12 |
before 1.12-1 | 1.12-1 |
potraceDebian:13 |
before 1.12-1 | 1.12-1 |
potraceDebian:14 |
before 1.12-1 | 1.12-1 |
potraceDebian:7 From an advisory covering 11 CVEs |
before 1.10-1+deb7u1, plus listed versions 1.10-1 |
1.10-1+deb7u1 |
potraceMageia:4 |
before 1.11-3.1.mga4 | 1.11-3.1.mga4 |
potraceUbuntu:16.04:LTS |
before 1.12-1 | 1.12-1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2013-7437 is a medium vulnerability (CVSS 5.0) in Icoasoft Potrace, published March 29, 2015. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.29%, the 88th percentile. Fixed in potrace 1.12-1.
References
lists.opensuse.org/opensuse-updates/2015-11/msg00034.html
bugzilla.redhat.com/show_bug.cgi?id=955808
openwall.com/lists/oss-security/2015/02/06/12
bugs.debian.org/cgi-bin/bugreport.cgi?bug=778646
nvd.nist.gov/vuln/detail/CVE-2013-7437
github.com/advisories/GHSA-6fx2-mw65-fcxv