PatchSiren

Autotrace Project CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM Autotrace Project CVE published 2017-02-15

CVE-2016-7392

CVE-2016-7392 describes a heap-based buffer overflow in AutoTrace 0.31.1. When pstoedit_suffix_table_init in output-pstoedit.c processes a crafted BMP image, the flaw can cause an out-of-bounds write and denial of service. NVD assigns the issue CVSS 3.0 5.5 (Medium) and maps it to CWE-787.