Out-of-bounds write in Google Chrome
Priority LOW 36CWE-787Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Denial of service
- Confidentiality · integrity · availability
- None · None · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA, GitHub and Red Hat. Impact type from CWE-787 and the CVSS impact.
Summary
Type confusion in xsltNumberFormatGetMultipleLevel prior to libxslt 1.1.33 could allow attackers to potentially exploit heap corruption via crafted XML data.
Why it matters now
EPSS 0.01817 78th percentileScored 2026-11-07
Fix Fixed Chrome (Google): 74.0.3729.108nokogiri (RubyGems): 1.10.5Red Hat: 1 advisory
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Chrome | before 74.0.3729.108 | 74.0.3729.108 | Patch available | CNA | |
| — | nokogiri (RubyGems) | before 1.10.5 | 1.10.5 | Patch available | GHSA-vmfx-gcfq-wvm2 |
- Chrome VendorGoogle Affected before 74.0.3729.108 Fixed in 74.0.3729.108 Patch available CNA
- nokogiri (RubyGems) Vendor— Affected before 1.10.5 Fixed in 1.10.5 Patch available GHSA-vmfx-gcfq-wvm2
Remediation
- Fix · CNA Chrome (Google) Fixed in 74.0.3729.108
- Fix · GHSA-vmfx-gcfq-wvm2 nokogiri (RubyGems) Fixed in 1.10.5 Advisory →
Red Hat 1 advisory
- RHSA-2019:1021 Released 2019-05-07 · Red Hat rating Importantchromium-browser security update
- Red Hat Enterprise Linux Desktop Supplementary (v. 6) chromium-browser-74.0.3729.108-1.el6_10
- Red Hat Enterprise Linux HPC Node Supplementary (v. 6) chromium-browser-74.0.3729.108-1.el6_10
- Red Hat Enterprise Linux Server Supplementary (v. 6) chromium-browser-74.0.3729.108-1.el6_10
- Red Hat Enterprise Linux Workstation Supplementary (v. 6) chromium-browser-74.0.3729.108-1.el6_10
Vendor assessments
Red Hat
Red Hat rating: Moderate. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Red Hat Enterprise Linux Desktop Supplementary (v. 6) | Fixed | RHSA-2019:1021 |
| Red Hat Enterprise Linux HPC Node Supplementary (v. 6) | Fixed | RHSA-2019:1021 |
| Red Hat Enterprise Linux Server Supplementary (v. 6) | Fixed | RHSA-2019:1021 |
| Red Hat Enterprise Linux Workstation Supplementary (v. 6) | Fixed | RHSA-2019:1021 |
Timeline
- 2026-10-02 Threatist record created from CVE-2019-5815
- 2026-10-03 Alias added: GHSA-vmfx-gcfq-wvm2
References
Other 6
- https://gitlab.gnome.org/GNOME/libxslt/commit/08b62c25871b38d5d573515ca8a065b4b8f64f6b
- https://bugs.chromium.org/p/chromium/issues/detail?id=930663
- [debian-lts-announce] 20220909 [SECURITY] [DLA 3101-1] libxslt security update
- https://github.com/sparklemotion/nokogiri/issues/2630
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/nokogiri/CVE-2019-5815.yml
- https://github.com/sparklemotion/nokogiri
More Google vulnerabilities
- TI-2025-09686 Type confusion in Google Chrome KEVCVSS 3.1CRITICAL 9.8
- TI-2024-07390 Type confusion in Google Chrome KEVCVSS 3.1CRITICAL 9.6
- TI-2024-04898 Type confusion in Google Chrome KEVCVSS 3.1CRITICAL 9.6
- TI-2024-04600 Type confusion in Google Chrome KEVCVSS 3.1CRITICAL 9.6
- TI-2024-04346 Use after free in Google Chrome KEVCVSS 3.1CRITICAL 9.6
- TI-2023-05824 Integer overflow in Google Chrome KEVCVSS 3.1CRITICAL 9.6
Sources
- CVE-2019-5815 · CVE Program
- CVE-2019-5815 · NVD
- FIRST EPSS
- GHSA-vmfx-gcfq-wvm2 · GitHub Advisory Database · CC BY 4.0
- CVE-2019-5815 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences