PT-2019-1907 · Google+5 · Skia+6
Ivan Fratric
·
Published
2019-01-29
·
Updated
2024-12-12
·
CVE-2019-5785
CVSS v2.0
7.8
High
| Vector | AV:N/AC:L/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
Google Chrome versions prior to 72.0.3626.81
Skia (affected versions not specified)
Description
The issue is related to incorrect convexity calculations in the Skia library, which can be exploited by a remote attacker to perform an out of bounds memory write via a crafted HTML page. Additionally, there is a vulnerability in the Skia library related to integer overflow, which can cause a denial of service when exploited by a remote attacker.
Recommendations
For Google Chrome versions prior to 72.0.3626.81, update to version 72.0.3626.81 or later to resolve the issue.
For Skia, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Memory Corruption
Integer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Alt Linux
Centos
Google Chrome
Red Hat
Skia
Suse
Ubuntu