CVE-2019-5815: Heap buffer overflow in Blink

Reference Links

• https://bugs.chromium.org/p/chromium/issues/detail?id=930663
• https://gitlab.gnome.org/GNOME/libxslt/commit/08b62c25871b38d5d573515ca8a065b4b8f64f6b
• https://lists.debian.org/debian-lts-announce/2022/09/msg00010.html
• https://security-tracker.debian.org/tracker/CVE-2019-5815
• https://chromereleases.googleblog.com/2019/04/stable-channel-update-for-desktop_23.html (Advisory)

Parent vulnerabilities

(Appears in the following advisories)

• 286281954613599470

Peer vulnerabilities

(Found alongside the following vulnerabilities)

• CVE-2019-5805
• CVE-2019-5806
• CVE-2019-5807
• CVE-2019-5808
• CVE-2019-5809
• CVE-2019-5810
• CVE-2019-5811
• CVE-2019-5812
• CVE-2019-5813
• CVE-2019-5814
• CVE-2019-5816
• CVE-2019-5817
• CVE-2019-5818
• CVE-2020-6503
• CVE-2019-5819
• CVE-2019-5820
• CVE-2019-5821
• CVE-2019-5822
• CVE-2019-5823
• CVE-2020-6504

Frequently Asked Questions

• What is CVE-2019-5815?

  CVE-2019-5815 is a vulnerability that allows attackers to potentially exploit heap corruption via crafted XML data.

• What is the severity of CVE-2019-5815?

  CVE-2019-5815 has a severity level of 7.5 (high).

• How does CVE-2019-5815 affect the affected software?

  CVE-2019-5815 affects the software mentioned in the 'affected_software' field, specifically 'libxslt' and 'chromium' on certain debian/linux versions.

• How can CVE-2019-5815 be fixed?

  To fix CVE-2019-5815, users should update to the recommended versions mentioned in the 'affected_software' field or apply the provided patches from the official sources.

• Where can I find more information about CVE-2019-5815?

  More information about CVE-2019-5815 can be found in the references provided: [link1], [link2], [link3].