PT-2021-9016 · Autotrace+5 · Autotrace+5

Published 2021-02-11 · Updated 2024-07-04 · CVE-2019-19005

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions autotrace version 0.31.1

Description A bitmap double free issue in the main.c file of autotrace allows attackers to cause an unspecified impact via a malformed bitmap image. This issue may occur after a use-after-free error.

Recommendations For autotrace version 0.31.1, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Double Free

Weakness Enumeration

CWE-415

Related Identifiers

ALSA-2021:4519

ALT-PU-2024-9579

CESA-2021_4519

CVE-2019-19005

OPENSUSE-SU-2022_0141-1

OPENSUSE-SU-2024:12090-1

RHSA-2021:4519

RHSA-2021_4519

Affected Products

Alt Linux

Almalinux

Centos

Red Hat

Suse

Autotrace

References · 13

• https://github.com/autotrace/autotrace/pull/40 · Patch
• https://github.com/autotrace/autotrace/commits/master · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2019-19005 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NC6MUH2RLVEA634LHBNZ2KO7MQKI2RDZ · Vendor Advisory
• https://ubuntu.com/security/CVE-2019-19005 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-19005 · Security Note
• https://osv.dev/vulnerability/ALSA-2021:4519 · Vendor Advisory
• https://errata.almalinux.org/8/ALSA-2021-4519.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-19005 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2019-19005 · Security Note
• https://vulners.com/cve/CVE-2019-19004 · Note
• https://vulners.com/cve/CVE-2019-19005 · Note
• https://t.me/cibsecurity/23506 · Telegram Post