What is the severity of CVE-2020-6556?

CVE-2020-6556 is classified as a high severity vulnerability due to the potential for remote code execution via heap corruption.

How do I fix CVE-2020-6556?

To fix CVE-2020-6556, upgrade to Google Chrome version 84.0.4147.135 or later, or update your Debian or Fedora packages to the corresponding patched versions.

What versions of Google Chrome are affected by CVE-2020-6556?

Google Chrome versions prior to 84.0.4147.135 are affected by CVE-2020-6556.

Does CVE-2020-6556 affect Chromium on Debian systems?

Yes, CVE-2020-6556 impacts Chromium versions below 90.0.4430.212-1~deb10u1 on Debian systems.

What type of attack does CVE-2020-6556 facilitate?

CVE-2020-6556 potentially allows an attacker to perform remote code execution through a crafted HTML page that exploits heap corruption.

Vulnerability/
CVE-2020-6556

critical

9.3

CWE

787 119

18/8/2020

21/9/2020

4/8/2024

CVE-2020-6556: Buffer Overflow

First published: Tue Aug 18 2020(Updated: )

Heap buffer overflow in SwiftShader in Google Chrome prior to 84.0.4147.135 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Credit: chrome-cve-admin@google.com

Affected Software	Affected Version	How to fix
debian/chromium		90.0.4430.212-1~deb10u1 116.0.5845.180-1~deb11u1 120.0.6099.129-1~deb11u1 119.0.6045.199-1~deb12u1 120.0.6099.129-1~deb12u1 120.0.6099.129-1
Google Chrome	<84.0.4147.135	84.0.4147.135
Google Chrome	<84.0.4147.125
Debian GNU/Linux	=10.0
Fedoraproject Fedora	=33
openSUSE	=15.1
openSUSE	=15.2

Never miss a vulnerability like this again

Reference Links

Parent vulnerabilities

(Appears in the following advisories)

359623453294637770

Frequently Asked Questions

What is the severity of CVE-2020-6556?
CVE-2020-6556 is classified as a high severity vulnerability due to the potential for remote code execution via heap corruption.
How do I fix CVE-2020-6556?
To fix CVE-2020-6556, upgrade to Google Chrome version 84.0.4147.135 or later, or update your Debian or Fedora packages to the corresponding patched versions.
What versions of Google Chrome are affected by CVE-2020-6556?
Google Chrome versions prior to 84.0.4147.135 are affected by CVE-2020-6556.
Does CVE-2020-6556 affect Chromium on Debian systems?
Yes, CVE-2020-6556 impacts Chromium versions below 90.0.4430.212-1~deb10u1 on Debian systems.
What type of attack does CVE-2020-6556 facilitate?
CVE-2020-6556 potentially allows an attacker to perform remote code execution through a crafted HTML page that exploits heap corruption.

collector/security-tracker-debian
agent/type
agent/severity
agent/weakness
agent/author
collector/mitre-cve
source/MITRE
agent/last-modified-date
agent/references
agent/description
agent/first-publish-date
collector/chrome-releases
agent/software-canonical-lookup
agent/event
agent/trending
agent/source
agent/softwarecombine
agent/tags
collector/nvd-index
agent/software-canonical-lookup-request
package-manager/debian
vendor/google
canonical/google chrome
vendor/debian
canonical/debian gnu/linux
version/debian gnu/linux/10.0
vendor/fedoraproject
canonical/fedoraproject fedora
version/fedoraproject fedora/33
vendor/opensuse
canonical/opensuse
version/opensuse/15.1
version/opensuse/15.2

Frequently Asked Questions

What is the severity of CVE-2020-6556?
CVE-2020-6556 is classified as a high severity vulnerability due to the potential for remote code execution via heap corruption.
How do I fix CVE-2020-6556?
To fix CVE-2020-6556, upgrade to Google Chrome version 84.0.4147.135 or later, or update your Debian or Fedora packages to the corresponding patched versions.
What versions of Google Chrome are affected by CVE-2020-6556?
Google Chrome versions prior to 84.0.4147.135 are affected by CVE-2020-6556.
Does CVE-2020-6556 affect Chromium on Debian systems?
Yes, CVE-2020-6556 impacts Chromium versions below 90.0.4430.212-1~deb10u1 on Debian systems.
What type of attack does CVE-2020-6556 facilitate?
CVE-2020-6556 potentially allows an attacker to perform remote code execution through a crafted HTML page that exploits heap corruption.

CVE-2020-6556: Buffer Overflow

Never miss a vulnerability like this again

Reference Links

Parent vulnerabilities

Frequently Asked Questions

What is the severity of CVE-2020-6556?

How do I fix CVE-2020-6556?

What versions of Google Chrome are affected by CVE-2020-6556?

Does CVE-2020-6556 affect Chromium on Debian systems?

What type of attack does CVE-2020-6556 facilitate?

Company

Resources

Contact

Frequently Asked Questions

What is the severity of CVE-2020-6556?

How do I fix CVE-2020-6556?

What versions of Google Chrome are affected by CVE-2020-6556?

Does CVE-2020-6556 affect Chromium on Debian systems?

What type of attack does CVE-2020-6556 facilitate?