CVE-2019-13734

HIGH

8.8

CVSS Score

Published: December 10, 2019 at 09:01 PM UTC

Updated: June 17, 2026 at 02:17 AM UTC

16 products affected across 8 vendorsDebian LinuxChromeFedora

Using Chrome by Google?

Get instant alerts when new vulnerabilities affect Chrome - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

HIGH8.8

Exploit prediction

EPSS 4%

Description

Out of bounds write in SQLite in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Ubuntu Linux · Canonicalrubygems

95%

14.04 16.04 18.04 19.10

Debian Linux · Debiandrupal

95%

10.0 9.0

Fedora · Fedora Projectrpm

95%

30 31

Chrome · Googlenpm

95%

v < 79.0.3945.79

Affected range stops below 79.0.3945.79, so it looks safe — our inference, not a vendor statement

Backports Sle · openSUSE

95%

15.0 sp1

Communications Cloud Native Core Network Repository Function · Oracle

95%

1.14.0

Enterprise Linux · Red Hatrpm

95%

8.0

Enterprise Linux Desktop · Red Hatrubygems

95%

6.0 7.0

Enterprise Linux Eus · Red Hatrpm

95%

7.7 8.1 8.2 8.4

Enterprise Linux Server · Red Hatrubygems

95%

6.0 7.0

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

References (19)

Vendor Advisoryx_refsource_SUSEMailing ListThird Party Advisory

Source: [email protected]

http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00032.html

Vendor Advisoryx_refsource_SUSEMailing ListThird Party Advisory

Source: [email protected]

http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00036.html