CVE-2019-19004

Description

A biWidth*biBitCnt integer overflow in input-bmp.c in autotrace 0.31.1 allows attackers to provide an unexpected input value to malloc via a malformed bitmap image.

Risk Information

Base Score

3.3

MODERATE

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

EPSS Score

Exploitation Probability

0.371

Associated Vulnerability

Vulnerability	OS Platform
autotrace Security Update (ALAS-2023-1929) autotrace-0.31.1-38.amzn2.0.1.i686.rpm	Linux
autotrace Security Update (ALAS-2023-1929) autotrace-0.31.1-38.amzn2.0.1.x86_64.rpm	Linux
autotrace Security Update (ALAS-2023-1929) autotrace-devel-0.31.1-38.amzn2.0.1.x86_64.rpm	Linux
autotrace Security Update (ALAS2-2023-1929) autotrace-0.31.1-38.amzn2.0.1.i686.rpm	Linux
autotrace Security Update (ALAS2-2023-1929) autotrace-0.31.1-38.amzn2.0.1.x86_64.rpm	Linux
autotrace Security Update (ALAS2-2023-1929) autotrace-devel-0.31.1-38.amzn2.0.1.x86_64.rpm	Linux
autotrace Security Update (ALAS2023-2023-004) autotrace-0.31.1-62.amzn2023.0.2.x86_64.rpm	Linux
autotrace Security Update (ALAS2023-2023-004) autotrace-devel-0.31.1-62.amzn2023.0.2.x86_64.rpm	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234