CVE-2019-5824: High severity Google Chrome vulnerability
Chrome could allow a remote attacker to bypass security restrictions, caused by a parameter passing error in media player. By persuading a victim to visit a specially-crafted Web site, an attacker could exploit this vulnerability to gain unauthorized access to the system.
External References: https://exchange.xforce.ibmcloud.com/vulnerabilities/160323
Other sources
Parameter passing error in media in Google Chrome prior to 74.0.3729.131 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/chromium-browserto a version that resolves this vulnerability.Fixed in 74.0.3729.131 - Upgrade
Upgrade
debian/chromiumto a version that resolves this vulnerability.Fixed in 150.0.7871.100-1~deb12u1Fixed in 156.0.8078.79-1~deb12u1Fixed in 150.0.7871.181-1~deb13u1Fixed in 156.0.8078.79-1~deb13u1Fixed in 156.0.8078.79-1 - Upgrade
Upgrade
Google Chrometo a version that resolves this vulnerability.Fixed in 74.0.3729.131
Event History
Frequently Asked Questions
What is CVE-2019-5824?
CVE-2019-5824 is a vulnerability in Google Chrome that allows a remote attacker to potentially exploit heap corruption through a crafted HTML page.
Which versions of Google Chrome are affected by CVE-2019-5824?
Google Chrome versions prior to 74.0.3729.131 are affected by CVE-2019-5824.
How can I fix CVE-2019-5824 in Google Chrome?
To fix CVE-2019-5824 in Google Chrome, update to version 74.0.3729.131 or later.
What is the severity of CVE-2019-5824?
CVE-2019-5824 has a severity value of 8.8, which is considered high.
Where can I find more information about CVE-2019-5824?
You can find more information about CVE-2019-5824 at the following references: [link1], [link2], [link3].