CVE-2019-5828: orig in resources size disclosure in Appcache .
Object lifecycle issue in ServiceWorker in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.
Credit
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Google Chrome (Trace Event)to a version that resolves this vulnerability.Fixed in 75.0.3770.80 - Upgrade
Upgrade
debian/chromiumto a version that resolves this vulnerability.Fixed in 150.0.7871.100-1~deb12u1Fixed in 156.0.8078.79-1~deb12u1Fixed in 150.0.7871.181-1~deb13u1Fixed in 156.0.8078.79-1~deb13u1Fixed in 156.0.8078.79-1
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2019-5828?
CVE-2019-5828 has been classified as a high severity vulnerability due to the potential for out of bounds memory access.
How do I fix CVE-2019-5828?
To mitigate CVE-2019-5828, update Google Chrome to version 75.0.3770.80 or later.
Which versions of Chrome are affected by CVE-2019-5828?
CVE-2019-5828 affects versions of Google Chrome prior to 75.0.3770.80.
Is CVE-2019-5828 specific to Chrome or does it affect other browsers?
CVE-2019-5828 specifically pertains to vulnerabilities within the Google Chrome browser.
What type of vulnerability is CVE-2019-5828?
CVE-2019-5828 is an object lifecycle issue in the ServiceWorker API of Google Chrome.