Skip to content
OpenAdvisories
Unscored CVE-2020-6464 EUVD-2020-27614GHSA-rf7m-m6ch-rqm3

Type confusion in Blink in Google Chrome prior to 81.0.4044.138 allowed a remote attacker to potentially exploit heap corruption via a craf…

Published May 21, 2020 · Updated Aug 4, 2024 · Assigned by Chrome

Description

Type confusion in Blink in Google Chrome prior to 81.0.4044.138 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Affected products

VendorProductAffectedFixed
Google Chrome unspecified – < 81.0.4044.138 81.0.4044.138

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 chromium 83.0.4103.83-1 —
Debian 13 chromium 83.0.4103.83-1 —
Debian 12 chromium 83.0.4103.83-1 —
Debian 10 chromium 83.0.4103.116-1~deb10u1 DSA-4714-1
ReleasePackageFixed inAdvisory
Ubuntu 18.04 LTS chromium-browser 81.0.4044.138-0ubuntu0.18.04.1 —
Ubuntu 16.04 LTS chromium-browser 81.0.4044.138-0ubuntu0.16.04.1 —
ReleasePackageFixed inAdvisory
RHEL 6 chromium-browser 81.0.4044.138-1.el6_10 RHSA-2020:2064
ReleasePackageFixed inAdvisory
SUSE Package Hub 15 SP1 chromium 81.0.4044.138-bp151.3.82.2 openSUSE-SU-2020:0648-1
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed chromium 93.0.4577.82-1.1 openSUSE-SU-2024:12948-1, openSUSE-SU-2024:10681-1
openSUSE Leap 15.2 opera 68.0.3618.104-lp152.2.6.1 openSUSE-SU-2020:0917-1
openSUSE Leap 15.1 chromium 81.0.4044.138-lp151.2.88.1 openSUSE-SU-2020:0620-1
openSUSE Leap 15.1 opera 68.0.3618.104-lp151.2.18.1 openSUSE-SU-2020:0709-1

Advisories 8

References