CVE-2020-16010: Heap buffer overflow in UI on Android
Google Chrome for Android UI contains a heap buffer overflow vulnerability that allows a remote attacker, who has compromised the renderer process, to potentially perform a sandbox escape via a crafted HTML page.
Other sources
Heap buffer overflow in UI in Google Chrome on Android prior to 86.0.4240.185 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
Credit
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Google Chrome (Trace Event)to a version that resolves this vulnerability.Fixed in 86.0.4240.185
Event History
Frequently Asked Questions
What is the severity of CVE-2020-16010?
CVE-2020-16010 is considered a high severity vulnerability due to its potential for remote exploitation leading to a sandbox escape.
How do I fix CVE-2020-16010?
To fix CVE-2020-16010, update Google Chrome for Android to version 86.0.4240.185 or later.
What type of vulnerability is CVE-2020-16010?
CVE-2020-16010 is a heap buffer overflow vulnerability affecting the UI in Google Chrome for Android.
Who is affected by CVE-2020-16010?
CVE-2020-16010 affects users running Google Chrome for Android versions prior to 86.0.4240.185.
What can an attacker do with CVE-2020-16010?
An attacker could potentially perform a sandbox escape through a crafted HTML page if they compromised the renderer process.