CVE-2019-5824: High severity google chrome vulnerability

Published May 6, 2019
·
Updated

Chrome could allow a remote attacker to bypass security restrictions, caused by a parameter passing error in media player. By persuading a victim to visit a specially-crafted Web site, an attacker could exploit this vulnerability to gain unauthorized access to the system.

External References: https://exchange.xforce.ibmcloud.com/vulnerabilities/160323

Other sources

Parameter passing error in media in Google Chrome prior to 74.0.3729.131 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Affected Software

10 affected componentsFixes available
debian/chromium
90.0.4430.212-1~deb10u1116.0.5845.180-1~deb11u1120.0.6099.129-1~deb11u1119.0.6045.199-1~deb12u1120.0.6099.129-1~deb12u1120.0.6099.129-1
redhat/chromium-browser<74.0.3729.131
74.0.3729.131
Google Chrome<74.0.3729.131
openSUSE Backports=sle-15
openSUSE Leap=15.0
openSUSE Leap=15.1
openSUSE Leap=42.3
Debian Debian Linux=10.0
Fedoraproject Fedora=29
Fedoraproject Fedora=30

Event History

Jun 27, 2019
CVE Published
via MITRE·04:13 PM
Data Sourced
via MITRE·04:13 PM
DescriptionWeakness

Frequently Asked Questions

1

What is CVE-2019-5824?

CVE-2019-5824 is a vulnerability in Google Chrome that allows a remote attacker to potentially exploit heap corruption through a crafted HTML page.

2

Which versions of Google Chrome are affected by CVE-2019-5824?

Google Chrome versions prior to 74.0.3729.131 are affected by CVE-2019-5824.

3

How can I fix CVE-2019-5824 in Google Chrome?

To fix CVE-2019-5824 in Google Chrome, update to version 74.0.3729.131 or later.

4

What is the severity of CVE-2019-5824?

CVE-2019-5824 has a severity value of 8.8, which is considered high.

5

Where can I find more information about CVE-2019-5824?

You can find more information about CVE-2019-5824 at the following references: [link1], [link2], [link3].

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203