CVE-2019-5835

CVE-2019-5835 is a medium-severity object lifecycle vulnerability in SwiftShader, affecting Google Chrome prior to version 75.0.3770.80, as well as Fedora and openSUSE distributions. This flaw allows a remote attacker to potentially achieve out-of-bounds memory access by enticing a user to visit a crafted HTML page. The CVSS score of 6.5 indicates a network-based attack with low complexity, requiring user interaction, and leading to high confidentiality impact. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or inclusion in CISA's KEV catalog, though it has garnered some community discussion and media coverage.