NULL Pointer Dereference Vulnerability in potrace's bm_readbody_bmp Function

CVE-2016-8696 · MEDIUM Severity

AV:N/AC:M/AU:N/C:N/I:N/A:P

The bm_readbody_bmp function in bitmap_io.c in potrace before 1.13 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted BMP image, a different vulnerability than CVE-2016-8694 and CVE-2016-8695.

Learn more about our Web Application Penetration Testing UK.