Skip to content
OpenAdvisories
Unscored CVE-2020-16038 EUVD-2020-8005GHSA-j6j9-67jq-2hgx

Use after free in media in Google Chrome on OS X prior to 87.0.4280.88 allowed a remote attacker to potentially exploit heap corruption via…

Published Jan 8, 2021 · Updated Aug 4, 2024 · Assigned by Chrome

Description

Use after free in media in Google Chrome on OS X prior to 87.0.4280.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Affected products

VendorProductAffectedFixed
Google Chrome unspecified – < 87.0.4280.88 87.0.4280.88

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 chromium 87.0.4280.88-0.1 —
Debian 13 chromium 87.0.4280.88-0.1 —
Debian 12 chromium 87.0.4280.88-0.1 —
Debian 10 chromium 87.0.4280.88-0.4~deb10u1 DSA-4824-1
ReleasePackageFixed inAdvisory
Ubuntu 18.04 LTS chromium-browser 89.0.4389.82-0ubuntu0.18.04.1 —
Ubuntu 16.04 LTS chromium-browser 89.0.4389.82-0ubuntu0.16.04.1 —
ReleasePackageFixed inAdvisory
SUSE Package Hub 15 SP2 chromium 87.0.4280.88-bp152.2.44.1 openSUSE-SU-2020:2213-1
SUSE Package Hub 15 SP1 chromium 87.0.4280.88-bp151.3.147.1 openSUSE-SU-2020:2229-1
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed chromium 93.0.4577.82-1.1 openSUSE-SU-2024:12948-1, openSUSE-SU-2024:10681-1
openSUSE Leap 15.2 chromium 87.0.4280.88-lp152.2.57.1 openSUSE-SU-2020:2181-1
openSUSE Leap 15.2 opera 73.0.3856.284-lp152.2.27.1 openSUSE-SU-2020:2360-1
openSUSE Leap 15.1 chromium 87.0.4280.88-lp151.2.162.1 openSUSE-SU-2020:2216-1
openSUSE Leap 15.1 opera 73.0.3856.284-lp151.2.39.1 openSUSE-SU-2020:2359-1

Advisories 9

References