Most recent entries from all

ALSA-2021:4519 — Moderate: autotrace security update

Affected: AlmaLinux:8: autotrace

AutoTrace is a program for converting bitmaps to vector graphics.

Security Fix(es):

* autotrace: bitmap double free in main.c allows attackers to cause an unspecified impact (CVE-2019-19005)

* autotrace: integer overflow in input-bmp.c (CVE-2019-19004)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

cnvd-2021-13668

EUVD-2026-59001

fkie_cve-2019-19004

A biWidth*biBitCnt integer overflow in input-bmp.c in autotrace 0.31.1 allows attackers to provide an unexpected input value to malloc via a malformed bitmap image.

GHSA-rjwr-8pfc-m94f

A biWidth*biBitCnt integer overflow in input-bmp.c in autotrace 0.31.1 allows attackers to provide an unexpected input value to malloc via a malformed bitmap image.

gsd-2019-19004

openSUSE-SU-2024:12090-1 — autotrace-0.31.1-645.1 on GA media

autotrace-0.31.1-645.1 on GA media

UBUNTU-CVE-2019-19004

Affected: Ubuntu:14.04:LTS: autotrace, Ubuntu:16.04:LTS: autotrace

A biWidth*biBitCnt integer overflow in input-bmp.c in autotrace 0.31.1 allows attackers to provide an unexpected input value to malloc via a malformed bitmap image.

WID-SEC-W-2022-0571 — Red Hat Enterprise Linux: Mehrere Schwachstellen

Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um einen Cross-Site-Scripting-Angriff durchzuführen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuführen, Sicherheitsmaßnahmen zu umgehen, beliebigen Code auszuführen, Dateien zu manipulieren und einen nicht spezifizierten Angriff durchzuführen.