CVE-2019-19005: Autotrace Project Autotrace

High severity, CVSS 7.8. EPSS: 1% chance of exploitation in the next 30 days.

A bitmap double free in main.c in autotrace 0.31.1 allows attackers to cause an unspecified impact via a malformed bitmap image. This may occur after the use-after-free in CVE-2017-9182.

Affected products

• Autotrace Project Autotrace: version 0.31.1 only
• Fedoraproject Fedora: version 34 only

Published 2021-02-11. Last modified 2026-06-17.