PatchTheCVEautotrace vulnerabilities and fixes
Recent CVEs affecting autotrace, with upgrade or downgrade steps. 3 tracked.
autotrace has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2022-07-14. Highest priority: CVE-2019-19005 (score 43/100).
- CVE-2022-32323 HIGH 7.3 DOWNGRADE MITIGATE AutoTrace v0.40.0 was discovered to contain a heap overflow via the ReadImage function at input-bmp.c:660.
- CVE-2019-19005 HIGH 7.8 DOWNGRADE MITIGATE A bitmap double free in main.c in autotrace 0.31.1 allows attackers to cause an unspecified impact via a malfo
- CVE-2019-19004 LOW 3.3 DOWNGRADE MITIGATE A biWidth*biBitCnt integer overflow in input-bmp.c in autotrace 0.31.1 allows attackers to provide an unexpect
FAQ
How do I fix autotrace vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is autotrace being exploited right now?
None of the tracked autotrace CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which autotrace CVE should I patch first?
CVE-2019-19005 currently ranks highest (43/100): A bitmap double free in main.c in autotrace 0.31.1 allows attackers to cause an unspecified impact via a malfo.