CVE-2016-8699

Heap-based buffer overflow in the bm_readbody_bmp function in bitmap_io.c in potrace before 1.13 allows remote attackers to have unspecified impact via a crafted BMP image, a different vulnerability than CVE-2016-8698, CVE-2016-8700, CVE-2016-8701, CVE-2016-8702, and CVE-2016-8703.

• CWE-119

• http://potrace.sourceforge.net/ChangeLogRelease Notes, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2016/08/18/11Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2016/10/16/12Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/93778Third Party Advisory, VDB Entry
• https://blogs.gentoo.org/ago/2016/08/08/potrace-multiplesix-heap-based-buffer-overflow-in-bm_readbody_bmp-bitmap_io-c/Third Party Advisory
• http://potrace.sourceforge.net/ChangeLogRelease Notes, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2016/08/18/11Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2016/10/16/12Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/93778Third Party Advisory, VDB Entry
• https://blogs.gentoo.org/ago/2016/08/08/potrace-multiplesix-heap-based-buffer-overflow-in-bm_readbody_bmp-bitmap_io-c/Third Party Advisory

Published

Jan 31, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-8693Double free vulnerability in the mem_close function in jas_s…
• CVE-2016-8694The bm_readbody_bmp function in bitmap_io.c in potrace befor…
• CVE-2016-8695The bm_readbody_bmp function in bitmap_io.c in potrace befor…
• CVE-2016-8696The bm_readbody_bmp function in bitmap_io.c in potrace befor…
• CVE-2016-8697The bm_new function in bitmap.h in potrace before 1.13 allow…
• CVE-2016-8698Heap-based buffer overflow in the bm_readbody_bmp function i…
• CVE-2016-8700Heap-based buffer overflow in the bm_readbody_bmp function i…
• CVE-2016-8701Heap-based buffer overflow in the bm_readbody_bmp function i…
• CVE-2016-8702Heap-based buffer overflow in the bm_readbody_bmp function i…
• CVE-2016-8703Heap-based buffer overflow in the bm_readbody_bmp function i…
• CVE-2016-8704An integer overflow in the process_bin_append_prepend functi…9.8
• CVE-2016-8705Multiple integer overflows in process_bin_update function in…9.8