CVE-2020-6573: Use after free in video
Use after free in video in Google Chrome on Android prior to 85.0.4183.102 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
Credit
Affected Software
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is CVE-2020-6573?
CVE-2020-6573 is a vulnerability that refers to a use-after-free vulnerability in the video component of Google Chrome on Android prior to version 85.0.4183.102.
How can a remote attacker exploit CVE-2020-6573?
A remote attacker who has compromised the renderer process can potentially perform a sandbox escape by using a crafted HTML page.
What is the severity of CVE-2020-6573?
The severity of CVE-2020-6573 is critical with a CVSS score of 9.6.
Which software versions are affected by CVE-2020-6573?
Google Chrome on Android versions prior to 85.0.4183.102, openSUSE Backports SLE 15.0-sp1 and 15.0-sp2, Debian Debian Linux 10.0, Fedoraproject Fedora 31 and 33, and openSUSE Leap 15.1 and 15.2 are affected by CVE-2020-6573.
How can I fix CVE-2020-6573?
To fix CVE-2020-6573, update Google Chrome on Android to version 85.0.4183.102 or later, and apply the appropriate security patches or updates provided by the software vendor for the affected software versions.