CVE-2020-6514

PoC ×2—

CVSS 3.1

6.5 medium

EPSS

8%p94

Published

Jul 22, 2020 (Jul 22, 2020)

Modified

Jun 17, 2026

Description

Inappropriate implementation in WebRTC in Google Chrome prior to 84.0.4147.89 allowed an attacker in a privileged network position to potentially exploit heap corruption via a crafted SCTP stream.

Vendors: google opensuse fedoraproject debian canonical apple
Products: chrome, backports sle, leap, fedora, debian linux, ubuntu linux, safari, ipados, iphone os, tvos, watchos
Weakness: CWE-200
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (7.8%)

In the news0 stories

No ingested article mentions this CVE yet.