CVE-2019-19005

Description

A bitmap double free in main.c in autotrace 0.31.1 allows attackers to cause an unspecified impact via a malformed bitmap image. This may occur after the use-after-free in CVE-2017-9182.

Risk Information

Base Score

7.8

MODERATE

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS Score

Exploitation Probability

0.342

Associated Vulnerability

Vulnerability	OS Platform
autotrace Security Update (ALAS-2023-1929) autotrace-0.31.1-38.amzn2.0.1.i686.rpm	Linux
autotrace Security Update (ALAS-2023-1929) autotrace-0.31.1-38.amzn2.0.1.x86_64.rpm	Linux
autotrace Security Update (ALAS-2023-1929) autotrace-devel-0.31.1-38.amzn2.0.1.x86_64.rpm	Linux
autotrace Security Update (ALAS2-2023-1929) autotrace-0.31.1-38.amzn2.0.1.i686.rpm	Linux
autotrace Security Update (ALAS2-2023-1929) autotrace-0.31.1-38.amzn2.0.1.x86_64.rpm	Linux
autotrace Security Update (ALAS2-2023-1929) autotrace-devel-0.31.1-38.amzn2.0.1.x86_64.rpm	Linux
autotrace Security Update (ALAS2023-2023-004) autotrace-0.31.1-62.amzn2023.0.2.x86_64.rpm	Linux
autotrace Security Update (ALAS2023-2023-004) autotrace-devel-0.31.1-62.amzn2023.0.2.x86_64.rpm	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234