Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:28109
HistoryDec 06, 2020 - 3:05 a.m.

Arbitrary Code Execution

2020-12-0603:05:54
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10
chromium
vulnerability
arbitrary code execution
webrtc
heap corruption
remote attacker
malicious html page
host os
software

EPSS

0.022

Percentile

89.6%

chromium is vulnerable to arbitrary code execution. Insufficient checks of pointer validity in WebRTC allows a remote attacker to exploit a heap corruption and execute arbitrary code on the host OS via a malicious HTML page.