CVE-2019-5795: Integer overflow in PDFium

Reference Links

• https://code.google.com/p/chromium/issues/detail?id=919643
• https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html (Advisory)
• https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1688209
• https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1688208
• https://access.redhat.com/errata/RHSA-2019:0708
• https://bugzilla.redhat.com/show_bug.cgi?id=1688197
• http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00085.html
• https://crbug.com/919643

Parent vulnerabilities

(Appears in the following advisories)

• 8736584565359439648

Peer vulnerabilities

(Found alongside the following vulnerabilities)

• CVE-2019-5787
• CVE-2019-5788
• CVE-2019-5789
• CVE-2019-5790
• CVE-2019-5791
• CVE-2019-5792
• CVE-2019-5793
• CVE-2019-5794
• CVE-2019-5796
• CVE-2019-5797
• CVE-2019-5798
• CVE-2019-5799
• CVE-2019-5800
• CVE-2019-5801
• CVE-2019-5802
• CVE-2019-5803
• CVE-2019-5804

Frequently Asked Questions

• What is the severity of CVE-2019-5795?

  CVE-2019-5795 is classified as a high-severity vulnerability due to the potential for out of bounds memory access.

• How do I fix CVE-2019-5795?

  To fix CVE-2019-5795, upgrade to Chromium or Chrome version 73.0.3683.75 or later.

• What systems are affected by CVE-2019-5795?

  CVE-2019-5795 affects Google Chrome and Chromium browsers prior to version 73.0.3683.75.

• What type of attack does CVE-2019-5795 facilitate?

  CVE-2019-5795 allows a remote attacker to potentially exploit an integer overflow in PDFium via a crafted PDF file.

• Can CVE-2019-5795 lead to data loss?

  Exploitation of CVE-2019-5795 could lead to out of bounds memory access, which may result in data loss or corruption.