CVE-2020-6449

Use after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Link	Resource
https://www.debian.org/security/2020/dsa-4645	Third Party Advisory
https://crbug.com/1059686	Exploit Issue Tracking
http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00028.html	Mailing List Third Party Advisory
https://chromereleases.googleblog.com/2020/03/stable-channel-update-for-desktop_18.html	Vendor Advisory
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JWANFIR3PYAL5RJQ4AO3ZS2DYMSF2ZGZ/	Mailing List Third Party Advisory
https://security.gentoo.org/glsa/202003-53	Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2DDNOAGIX5D77TTHT6YPMVJ5WTXTCQEI/	Mailing List Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6IOHSO6BUKC6I66J5PZOMAGFVJ66ZS57/	Mailing List Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00037.html	Mailing List Third Party Advisory

Configuration 1

cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:* cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:* cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:* cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:* cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:* cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:* cpe:2.3:o:suse:suse_linux_enterprise_server:12:*:*:*:*:*:*:* cpe:2.3:a:opensuse:backports_sle:15.0:sp1:*:*:*:*:*:* cpe:2.3:o:suse:suse_linux_enterprise_desktop:12:*:*:*:*:*:*:*

---

Published : 2020-03-23 04:15

Updated : 2022-03-31 05:10

---

NVD link : CVE-2020-6449

Mitre link : CVE-2020-6449

Backports Sle

Opensuse

CWE-416