Firetruck

CVE-2020-16010

KEV

Google Chrome for Android UI Heap Buffer Overflow Vulnerability

View CVE record →
Vendor / Project
Google
Product
Chrome for Android UI
Date added
Nov 3, 2021
Due date
May 3, 2022
Known ransomware use
Unknown
CWEs
CWE-787

Description

Google Chrome for Android UI contains a heap buffer overflow vulnerability that allows a remote attacker, who has compromised the renderer process, to potentially perform a sandbox escape via a crafted HTML page.

Required action

Apply updates per vendor instructions.

Notes