MGASA-2015-0474
Updated potrace packages fix security vulnerabilities
Potrace before 1.13 has some critical bugs in the processing of BMP files. These bugs allowed the program to be crashed, or potentially to be abused in other ways, by feeding it specially crafted BMP files, due to heap overflow, null pointer dereference, and divide by zero issues.
What each source reports
OSV No score
Updated potrace packages fix security vulnerabilities
Potrace before 1.13 has some critical bugs in the processing of BMP files. These bugs allowed the program to be crashed, or potentially to be abused in other ways, by feeding it specially crafted BMP files, due to heap overflow, null pointer dereference, and divide by zero issues.
- Record
MGASA-2015-0474- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
potraceMageia:5 |
before 1.13-1.mga5 | 1.13-1.mga5 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
MGASA-2015-0474 is a vulnerability with no CVSS score yet in potrace, published December 16, 2015. No source lists public exploit code. Fixed in potrace 1.13-1.mga5.