CVE-2019-5798

CVSS v3.1 6.5 (Medium)

CVSS v2.0 4.3 (Medium)

EPSS 2.10 % (89^th)

Affected Products 7

Advisories 32

Lack of correct bounds checking in Skia in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.

Weaknesses

CWE-125: Out-of-bounds Read

CVE Status: PUBLISHED
CNA: Chrome
Published Date: 2019-05-23 20:29:01
(5 years ago)
Updated Date: 2023-11-07 03:12:17
(10 months ago)

Affected Products

Opensuse

Redhat

Enterprise Linux

Suse

Package Hub

Configuration #1

		CPE23	From	Up To
	Google Chrome prior 73.0.3683.75 version	cpe:2.3:a:google:chrome		< 73.0.3683.75

Configuration #2

		CPE23	From	Up To
	Debian Linux 8.0	cpe:2.3:o:debian:debian_linux:8.0
	Debian Linux 9.0	cpe:2.3:o:debian:debian_linux:9.0

Configuration #3

		CPE23	From	Up To
	Suse Package Hub	cpe:2.3:a:suse:package_hub:-
	Canonical Ubuntu Linux 16.04	cpe:2.3:o:canonical:ubuntu_linux:16.04:::*:esm
	Canonical Ubuntu Linux 18.04	cpe:2.3:o:canonical:ubuntu_linux:18.04:::*:lts
	Canonical Ubuntu Linux 18.10	cpe:2.3:o:canonical:ubuntu_linux:18.10
	Canonical Ubuntu Linux 19.04	cpe:2.3:o:canonical:ubuntu_linux:19.04
	Opensuse Backports Sle-15	cpe:2.3:o:opensuse:backports:sle-15
	Opensuse Leap 15.0	cpe:2.3:o:opensuse:leap:15.0
	Opensuse Leap 15.1	cpe:2.3:o:opensuse:leap:15.1
	Opensuse Leap 42.3	cpe:2.3:o:opensuse:leap:42.3
	Redhat Enterprise Linux 6.0	cpe:2.3:o:redhat:enterprise_linux:6.0
	Redhat Enterprise Linux 7.0	cpe:2.3:o:redhat:enterprise_linux:7.0
	Redhat Enterprise Linux 8.0	cpe:2.3:o:redhat:enterprise_linux:8.0

Weaknesses

Affected Products

Canonical

Debian

Google