CVE-2019-5844: Medium severity Google Chrome vulnerability
Out of bounds access in SwiftShader in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/chromiumto a version that resolves this vulnerability.Fixed in 150.0.7871.100-1~deb12u1Fixed in 156.0.8078.79-1~deb12u1Fixed in 150.0.7871.181-1~deb13u1Fixed in 156.0.8078.79-1~deb13u1Fixed in 156.0.8078.79-1
Event History
Frequently Asked Questions
What does an attacker need to exploit this issue?
An attacker would need to persuade a user to load a crafted HTML page. The attack can be delivered remotely and does not require attacker authentication or privileges.
Which Chrome versions are affected?
Google Chrome versions prior to 73.0.3683.75 are affected. Systems running a version at or above that version are not identified as affected by the provided data.
What is the likely impact if exploitation succeeds?
The flaw could allow heap corruption in SwiftShader and result in a denial of service. The provided severity vector indicates no direct confidentiality or integrity impact.