CVE-2013-1953: Integer underflow in the input_bmp_reader function in input-bmp.c in AutoTrace 0.31.1 allows context-depend...

Security readout for executives and security teams

AutoTrace 0.31.1 can mishandle a specially crafted small BMP header value, causing an integer underflow that leads to a buffer overflow. Business risk is mainly where AutoTrace processes untrusted BMP files, such as image conversion pipelines or user-upload workflows. Exposure is likely limited to systems with AutoTrace 0.31.1 installed and reachable through workflows that parse BMP files. The provided affected-product metadata is incomplete, so confirm package use through asset and dependency inventory. Prioritize based on exposure. If AutoTrace processes untrusted images, schedule remediation promptly. If AutoTrace is absent or only used on trusted files, track through normal vulnerability management. Mitigation focus: Identify systems and applications using AutoTrace 0.31.1.; Check operating system and vendor advisories for fixed AutoTrace packages.; Update, remove, or isolate AutoTrace where BMP input is untrusted..

Prepared

Jun 14, 2026, 15:13 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.