Red Hat Security AdvisoryRHSA-2021:4519
autotrace security update
Released 2021-11-09 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder (v. 8) autotrace-0.31.1-53.el8
Fixes 2 records
Priority LOW 36
A bitmap double free in main.c in autotrace 0.31.1 allows attackers to cause an unspecified impact via a malformed bitmap image.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00977 · Published 2021-02-11 · Partial fix CWE-415
Priority LOW 18
A biWidth*biBitCnt integer overflow in input-bmp.c in autotrace 0.31.1 allows attackers to provide an unexpected input value to malloc via a malformed bitmap image.
CVSS 3.1LOW 3.3· Local · No auth · User interaction · EPSS 0.01031 · Published 2021-02-11 · Partial fix CWE-190
