Out-of-bounds Write Affecting chromium package, versions [,86.0.4240.185)


Severity

Recommended
0.0
high
0
10

CVSS assessment made by Snyk's Security Team. Learn more

Threat Intelligence

Exploit Maturity
Attacked
EPSS
0.32% (71st percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-UNMANAGED-CHROMIUM-2409216
  • published26 Jan 2022
  • disclosed3 Nov 2020
  • creditUnknown

Introduced: 3 Nov 2020

CVE-2020-16010  (opens in a new tab)
CWE-787  (opens in a new tab)

How to fix?

Upgrade chromium to version 86.0.4240.185 or higher.

Overview

Affected versions of this package are vulnerable to Out-of-bounds Write. Heap buffer overflow in UI in Google Chrome on Android prior to 86.0.4240.185 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

CVSS Base Scores

version 3.1