PT-2020-5693

CVE-2020-6544

Published

2020-08-10

Updated

2024-06-15

Description by

CVSS 3.1

8.8

High

MetricsAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 84.0.4147.125

Description The issue is related to a use after free in the media component, which could allow a remote attacker to exploit heap corruption via a crafted HTML page. This may enable the attacker to access confidential data, compromise data integrity, and cause a denial of service.

Recommendations For versions prior to 84.0.4147.125, update to version 84.0.4147.125 or later to resolve the issue.

Exploitability

Exploit

Fix

Impacts

Researchers

Tim Becker

Vendors

Affected products

Weakness enumeration

CWE-787: Out-of-bounds Write

CWE-416: Use After Free