CVE-2020-16001: Use after free in media
Use after free in media in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Credit
Affected Software
Remediation
Patch Available
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is CVE-2020-16001?
CVE-2020-16001 is a vulnerability in Google Chrome that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page.
What software is affected by CVE-2020-16001?
CVE-2020-16001 affects Google Chrome versions prior to 86.0.4240.111, Debian Linux 10.0, openSUSE Backports SLE 15.0-sp2, and Fedoraproject Fedora 31, 32, and 33.
What is the severity of CVE-2020-16001?
CVE-2020-16001 has a severity score of 8.8, which is considered high.
How can I fix CVE-2020-16001?
To fix CVE-2020-16001, you should update your Google Chrome to version 86.0.4240.111 or later.
Where can I find more information about CVE-2020-16001?
You can find more information about CVE-2020-16001 at the following references: http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00016.html, https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop_20.html, https://crbug.com/1135018