CVE-2020-6379: 
Node.js vulnerability analysis and mitigation

CVE-2020-6379 is a use-after-free vulnerability discovered in the speech recognizer component of Google Chrome versions prior to 79.0.3945.130. The vulnerability was reported by Guang Gong of Alpha Team, Qihoo 360 on December 12, 2019, and was publicly disclosed on January 16, 2020 (Chrome Releases).

The vulnerability is classified as a high-severity use-after-free issue affecting the speech recognizer component in Google Chrome's V8 engine. The vulnerability could potentially lead to heap corruption when exploited via a crafted HTML page (NVD). The issue received a CVSS v3 score of 8.8, indicating its high severity level (Red Hat).

If successfully exploited, this vulnerability could allow a remote attacker to potentially exploit heap corruption through a specially crafted HTML page, potentially leading to arbitrary code execution within the context of the browser (NVD).

The vulnerability was patched in Chrome version 79.0.3945.130. Users and administrators are advised to upgrade to this version or later to mitigate the risk. The fix was also backported to various Linux distributions including Fedora and Red Hat Enterprise Linux (Fedora).