PT-2018-2611 · Google+3 · Swiftshader+4

Published

2018-11-13

·

Updated

2024-06-15

·

CVE-2019-5761

CVSS v2.0

10

High

VectorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 72.0.3626.81
Description The issue is related to incorrect object lifecycle management in SwiftShader, a library used by Google Chrome. This could allow a remote attacker to exploit heap corruption via a crafted HTML page, potentially leading to arbitrary code execution. The vulnerability is also described as a use-after-free issue, which can be exploited by a remote attacker.
Recommendations For versions prior to 72.0.3626.81, update to version 72.0.3626.81 or later to resolve the issue. As a temporary workaround, consider restricting access to potentially vulnerable web pages until the update is applied.

Exploit

Fix

Use After Free

Memory Corruption

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-416CWE-787

Related Identifiers

ALT-PU-2019-1257
BDU:2019-01162
CVE-2019-5761
OPENSUSE-SU-2019:0204-1
OPENSUSE-SU-2019:0206-1
OPENSUSE-SU-2019:0216-1
OPENSUSE-SU-2019_0204-1
OPENSUSE-SU-2019_0205-1
OPENSUSE-SU-2024:10681-1
OPENSUSE-SU-2024:12948-1
RHSA-2019:0309
RHSA-2019_0309

Affected Products

Alt Linux
Google Chrome
Red Hat
Suse
Swiftshader