CVE-2019-5788
HIGHGoogle Chrome < 73.0.3683.75 - Use-After-Free via Blink Storage Integer Overflow
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2019-5788. PoCs published by Google Security Research.
AI-analyzed exploit summary The exploit demonstrates a use-after-free vulnerability in Chrome's FileSystemOperationRunner due to OperationID integer wrap-around. The PoC requires either a malformed blob or FileWriter API access, and triggers the issue via JavaScript, though runtime is lengthy (~2 days).
Description
An integer overflow that leads to a use-after-free in Blink Storage in Google Chrome on Linux prior to 73.0.3683.75 allowed a remote attacker who had compromised the renderer process to execute arbitrary code via a crafted HTML page.
Exploits (1)
The exploit demonstrates a use-after-free vulnerability in Chrome's FileSystemOperationRunner due to OperationID integer wrap-around. The PoC requires either a malformed blob or FileWriter API access, and triggers the issue via JavaScript, though runtime is lengthy (~2 days).
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H