CVE-2019-5790: Heap buffer overflow in V8
A heap buffer overflow flaw was found in the V8 component of the Chromium browser.
Upstream bug(s):
https://code.google.com/p/chromium/issues/detail?id=914736
External References:
https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop12.html
Other sources
An integer overflow leading to an incorrect capacity of a buffer in JavaScript in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.
— MITRE
Credit
Affected Software
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2019-5790?
CVE-2019-5790 has been classified as a critical vulnerability.
How do I fix CVE-2019-5790?
To fix CVE-2019-5790, update to Google Chrome version 73.0.3683.75 or later.
What types of software are affected by CVE-2019-5790?
CVE-2019-5790 affects Google Chrome, Chromium browser, and certain versions of openSUSE.
Can CVE-2019-5790 lead to remote code execution?
Yes, CVE-2019-5790 allows a remote attacker to execute arbitrary code inside a sandbox.
What component of Chrome is primarily affected by CVE-2019-5790?
The V8 component of Google Chrome is primarily affected by CVE-2019-5790.