CVE-2020-6569: Integer overflow in WebUSB

Q: What is CVE-2020-6569?

CVE-2020-6569 is an integer overflow vulnerability in WebUSB in Google Chrome prior to version 85.0.4183.83.

Q: How does CVE-2020-6569 impact Google Chrome?

CVE-2020-6569 allows a remote attacker who has compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.

Q: What software versions are affected by CVE-2020-6569?

Google Chrome prior to version 85.0.4183.83, openSUSE Backports SLE 15.0-SP1 and 15.0-SP2, Debian Debian Linux 10.0, Fedoraproject Fedora 33, openSUSE Leap 15.1 and 15.2.

Q: What is the severity of CVE-2020-6569?

CVE-2020-6569 has a severity rating of medium (6.3).

Q: How can I fix CVE-2020-6569?

To fix CVE-2020-6569, update your Google Chrome browser to version 85.0.4183.83 or later.

Published Aug 20, 2019

Updated

Integer overflow in WebUSB in Google Chrome prior to 85.0.4183.83 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.

Credit

guaixiaomei

Affected Software

9 affected componentsFixes available

debian/chromium

90.0.4430.212-1~deb10u1116.0.5845.180-1~deb11u1120.0.6099.129-1~deb11u1119.0.6045.199-1~deb12u1120.0.6099.129-1~deb12u1120.0.6099.129-1

Google Chrome<85.0.4183.83

85.0.4183.83

Google Chrome<85.0.4183.83

openSUSE Backports SLE=15.0-sp1

openSUSE Backports SLE=15.0-sp2

Debian Debian Linux=10.0

Fedoraproject Fedora=33

openSUSE Leap=15.1

openSUSE Leap=15.2

Remediation

Patch Available

http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00072.html

Event History

Aug 20, 2019

CVE Published

12:00 AM

Sep 21, 2020

CVE Published

via MITRE·07:06 PM

Data Sourced

via MITRE·07:06 PM

DescriptionWeakness

Parent advisories

This vulnerability appears in the following advisories.

8899364509753834961

Peer vulnerabilities

Found alongside the following vulnerabilities.

Frequently Asked Questions

What is CVE-2020-6569?