CVE-2019-19005

Description

References

• autotrace/autotrace · Patch
• autotrace/autotrace#40 · Patch
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NC6MUH2RLVEA634LHBNZ2KO7MQKI2RDZ

More vulnerabilities in autotrace

• CVE-2022-32323HIGH 7.3AutoTrace v0.40.0 was discovered to contain a heap overflow via the ReadImage function at input-bmp.c:660.
• CVE-2019-19004LOW 3.3A biWidth*biBitCnt integer overflow in input-bmp.c in autotrace 0.31.1 allows attackers to provide an unexpected input value to malloc via a…
• CVE-2017-9200CRITICAL 9.8libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in input-tga.c:528:63.
• CVE-2017-9199CRITICAL 9.8libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in input-tga.c:192:19.
• CVE-2017-9198CRITICAL 9.8libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in input-tga.c:508:18.