PT-2020-2073

CVE-2020-6450

·

Published

2020-03-31

·

Updated

2024-06-15

Description by

CVSS 2.0
9.3
High
MetricsAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 80.0.3987.162
Description The issue is related to a use after free in the WebAudio component, which can be exploited by a remote attacker via a crafted HTML page. This could potentially lead to heap corruption, allowing the attacker to gain unauthorized access to sensitive data, cause a denial of service, or impact data integrity.
Recommendations For versions prior to 80.0.3987.162, update to version 80.0.3987.162 or later to resolve the issue. As a temporary workaround, consider restricting access to WebAudio functionality until the update is applied.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
Related identifiers
ALT-PU-2020-1706
ALT-PU-2020-1765
ALT-PU-2020-2420
ALT-PU-2020-2441
DSA-4654-1
MGASA-2020-0174
OPENSUSE-SU-2020:0512-1
OPENSUSE-SU-2020:0519-1
OPENSUSE-SU-2020_0519-1
OPENSUSE-SU-2020:0540-1
OPENSUSE-SU-2024:10681-1
OPENSUSE-SU-2024:12948-1
RHSA-2020:1350
RHSA-2020_1350
Found an issue in the description? Have something to add? Feel free to write us 👾