CVE-2020-16038: Use after free in media
Published Oct 14, 2020
·Updated
Use after free in media in Google Chrome on OS X prior to 87.0.4280.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Credit
Khalil Zhani
Affected Software
4 affected componentsFixes available
debian/chromium
90.0.4430.212-1~deb10u1116.0.5845.180-1~deb11u1120.0.6099.129-1~deb11u1119.0.6045.199-1~deb12u1120.0.6099.129-1~deb12u1120.0.6099.129-1
Google Chrome<87.0.4280.88
87.0.4280.88
Google Chrome<87.0.4280.88
Google Chrome OS
Event History
Oct 14, 2020
CVE Published
12:00 AM
Jan 8, 2021
CVE Published
via MITRE·05:54 PM
Data Sourced
via MITRE·05:54 PM
DescriptionWeakness
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
1
What is CVE-2020-16038?
CVE-2020-16038 is a vulnerability in Google Chrome on OS X that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page.
2
What is the severity of CVE-2020-16038?
The severity of CVE-2020-16038 is critical with a CVSS score of 8.8.
3
What software is affected by CVE-2020-16038?
Google Chrome on OS X versions prior to 87.0.4280.88 is affected by CVE-2020-16038.
4
How can I fix CVE-2020-16038?
To fix CVE-2020-16038, update Google Chrome to version 87.0.4280.88 or later.
5
Where can I find more information about CVE-2020-16038?
You can find more information about CVE-2020-16038 on the Google Chrome releases blog, CRBug and the Debian security tracker.