PT-2019-4829 · Google+2 · Google Chrome+2

Publicado 2019-04-30 · Atualizado 2025-10-24 · CVE-2019-5825

Positive Technologies (AI Summary)

CVSS v2.0

7.1

Alta

Vetor base

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 73.0.3683.86

Description The issue is related to an out of bounds write in JavaScript, which can potentially lead to heap corruption. A remote attacker could exploit this via a crafted HTML page, potentially allowing for a denial of service.

Recommendations For versions prior to 73.0.3683.86, update to version 73.0.3683.86 or later to resolve the issue. As a temporary workaround, consider restricting access to potentially vulnerable JavaScript functions until a patch is applied.

Exploit

Correção

Use After Free

Memory Corruption

Enumeração de Fraquezas

CWE-416

CWE-787

Identificadores relacionados

ALSA-2025_16880

ALT-PU-2019-1782

BDU:2020-01413

CVE-2019-5825

DSA-4500-1

MGASA-2019-0283

RHSA-2019:1021

RHSA-2019_1021

Produtos afetados

Alt Linux

Google Chrome

Red Hat

Referências · 40

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/chrome_array_map.rb · Exploit
• 🔥 https://github.com/timwr/CVE-2019-5825 · Exploit
• 🔥 https://crbug.com/941743 · Exploit
• 🔥 https://exploit-db.com/exploits/48183 · Exploit
• 🔥 http://packetstormsecurity.com/files/156641/Google-Chrome-72-73-Array.map-Corruption.html · Exploit
• https://wiki.astralinux.ru/pages/viewpage.action?pageId=57444186 · Aviso do Fabricante
• https://chromereleases.googleblog.com/2019/06/stable-channel-update-for-desktop_18.html · Nota
• https://chromereleases.googleblog.com/2019/05/stable-channel-update-for-desktop_21.html · Nota
• https://bugs.mageia.org/show_bug.cgi?id=23558 · Nota
• https://chromereleases.googleblog.com/2019/05/stable-channel-update-for-desktop.html · Nota
• https://cve.org/CVERecord?id=CVE-2019-5825 · Nota de Segurança
• https://osv.dev/vulnerability/DEBIAN-CVE-2019-5825 · Aviso do Fabricante
• https://osv.dev/vulnerability/DSA-4500-1 · Aviso do Fabricante
• https://chromereleases.googleblog.com/2019/04/stable-channel-update-for-desktop_23.html · Nota
• https://chromereleases.googleblog.com/2019/07/stable-channel-update-for-desktop.html · Nota