CVE-2020-6418: Google Chromium V8 Type Confusion Vulnerability
Google Chromium V8 Engine contains a type confusion vulnerability allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
Other sources
Type confusion in V8 in Google Chrome prior to 80.0.3987.122 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/chromium-browserto a version that resolves this vulnerability.Fixed in 0:80.0.3987.122-1.el6_10 - Upgrade
Upgrade
debian/chromiumto a version that resolves this vulnerability.Fixed in 90.0.4430.212-1~deb10u1Fixed in 116.0.5845.180-1~deb11u1Fixed in 120.0.6099.129-1~deb11u1Fixed in 119.0.6045.199-1~deb12u1Fixed in 120.0.6099.129-1~deb12u1Fixed in 120.0.6099.129-1 - Upgrade
Upgrade
redhat/chromium-browserto a version that resolves this vulnerability.Fixed in 80.0.3987.122 - Upgrade
Upgrade
Google Chrome (Trace Event)to a version that resolves this vulnerability.Fixed in 80.0.3987.122
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is CVE-2020-6418?
CVE-2020-6418 is a type confusion vulnerability in the Google Chromium V8 Engine.
What software is affected by CVE-2020-6418?
The Google Chromium V8 Engine, Google Chrome, redhat/chromium-browser, debian/chromium, Fedoraproject Fedora, and Redhat Enterprise Linux are affected by CVE-2020-6418.
What is the severity of CVE-2020-6418?
CVE-2020-6418 has a severity score of 8.8, which is considered high.
How can a remote attacker exploit CVE-2020-6418?
A remote attacker can potentially exploit the type confusion vulnerability in the Google Chromium V8 Engine by using a crafted HTML page.
How can I fix CVE-2020-6418?
To fix CVE-2020-6418, you should update your software to version 80.0.3987.122 or later for Google Chrome and Google Chromium V8 Engine, or follow the recommended remedies for redhat/chromium-browser, debian/chromium, Fedoraproject Fedora, and Redhat Enterprise Linux.