CVE-2019-5762 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Google Chrome

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer9 documents7 sources

Severity

8.8HIGHNVD

EPSS

2.4%

top 14.92%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Google Chrome Chromium Debian Linux +4 more

Timeline

PublishedFeb 19

Latest updateMay 14

Description

Inappropriate memory management when caching in PDFium in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted PDF file.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9

Affected Packages6 packages

▶CVEListV5google/chromeunspecified — 72.0.3626.81

▶NVDgoogle/chrome< 72.0.3626.81

▶Debianchromium/chromium< 72.0.3626.81-1+3

▶NVDredhat/enterprise_linux_server6.0

▶NVDredhat/enterprise_linux_desktop6.0

Also affects: Debian Linux 9.0, Fedora 29, 30

🔴Vulnerability Details

GHSA

GHSA-g83j-2rfm-g53j: Inappropriate memory management when caching in PDFium in Google Chrome prior to 72↗2022-05-14

▶

CVEList

CVE-2019-5762: Inappropriate memory management when caching in PDFium in Google Chrome prior to 72↗2019-02-19

▶

OSV

CVE-2019-5762: Inappropriate memory management when caching in PDFium in Google Chrome prior to 72↗2019-02-19

▶

📋Vendor Advisories

Red Hat

chromium-browser: Use after free in PDFium↗2019-01-29

▶

Debian

CVE-2019-5762: chromium - Inappropriate memory management when caching in PDFium in Google Chrome prior to...↗2019

▶

💬Community

Bugzilla

CVE-2019-5762 chromium-browser: Use after free in PDFium↗2019-01-30

▶

Bugzilla

CVE-2019-5754 CVE-2019-5755 CVE-2019-5756 CVE-2019-5757 CVE-2019-5758 CVE-2019-5759 CVE-2019-5760 CVE-2019-5761 CVE-2019-5762 CVE-2019-5763 CVE-2019-5764 CVE-2019-5765 CVE-2019-5766 CVE-2019-5767 CVE-↗2019-01-30

▶

Bugzilla

▶