CVE-2019-5786 Google Chrome Blink Use-After-Free
A remote attacker can execute arbitrary code via a crafted HTML page due to an object lifetime issue in the Blink rendering engine.
- Exploited in the wild
- Since 23 May 2022
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2019-5786?
CVE-2019-5786 is a medium-severity use after free vulnerability in Google Chrome, published on 27 Jun 2019. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
Object lifetime issue in Blink in Google Chrome prior to 72.0.3626.121 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.
Weakness: CWE-416
Which versions are affected by CVE-2019-5786?
2 open source packages ship an affected version, including puppeteer. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
puppeteer npm | All versions | 1.13.0 |
puppeteer npm | All versions | 1.13.0 |
Linux distribution packages (5)
chromium-browser Red Hat:rhel_extras:6 | All versions | 0:72.0.3626.121-1.el6_10 |
chromium-browser-debuginfo Red Hat:rhel_extras:6 | All versions | 0:72.0.3626.121-1.el6_10 |
chromium SUSE:Package Hub 12 SP2 | All versions | 72.0.3626.121-bp150.2.37.1 |
chromium SUSE:Package Hub 15 | All versions | 72.0.3626.121-bp150.2.37.1 |
chromium openSUSE:Leap 15.0 | All versions | 72.0.3626.121-bp150.2.37.1 |
Products include Google Chrome.
How do I fix CVE-2019-5786?
Upgrade puppeteer to 1.13.0 or later. US federal agencies must fix it by 13 Jun 2022.
Upgrade to the fixed version. These bugs are found with fuzzing and sanitisers and avoided by memory-safe languages. More about Use after free.
Is CVE-2019-5786 being exploited?
Yes. Attackers have exploited CVE-2019-5786 in the wild since at least 23 May 2022.
Public exploit code: 1 Metasploit module, 2 Exploit-DB entries and 1 proofs of concept on GitHub.
Other vulnerabilities in Google Chrome
Sources
Also known as DEBIAN-CVE-2019-5786, DSA-4404-1, GHSA-c2gp-86p4-5935, RHSA-2019:0481, UBUNTU-CVE-2019-5786, openSUSE-SU-2019:0298-1.