CVE-2019-13723: Use After Free
Use after free in WebBluetooth in Google Chrome prior to 78.0.3904.108 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.
Other sources
Use-after-free in Bluetooth.
Reference: https://chromereleases.googleblog.com/2019/11/stable-channel-update-for-desktop18.html https://bugs.chromium.org/p/chromium/issues/detail?id=1024121
— Red Hat
Affected Software
Event History
Frequently Asked Questions
What is CVE-2019-13723?
CVE-2019-13723 is a vulnerability in WebBluetooth in Google Chrome prior to version 78.0.3904.108 that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page.
How severe is CVE-2019-13723?
CVE-2019-13723 has a severity rating of 8.8 (high).
Which software versions are affected by CVE-2019-13723?
Google Chrome versions prior to 78.0.3904.108, Fedora 30 and 31, OpenSUSE Backports sle-15, and Red Hat Enterprise Linux Desktop, Server, and Workstation version 6.0 are affected by CVE-2019-13723.
How can an attacker exploit CVE-2019-13723?
An attacker who has compromised the renderer process can exploit CVE-2019-13723 to potentially exploit heap corruption by using a crafted HTML page.
Where can I find more information about CVE-2019-13723?
You can find more information about CVE-2019-13723 in the following references: [Google Chrome Releases](https://chromereleases.googleblog.com/2019/11/stable-channel-update-for-desktop_18.html), [Chromium Bug Report](https://bugs.chromium.org/p/chromium/issues/detail?id=1024121), [Red Hat Bugzilla](https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1775341).