CVE-2020-6465: 
Google Chrome vulnerability analysis and mitigation

CVE-2020-6465 is a use-after-free vulnerability discovered in the reader mode of Google Chrome on Android prior to version 83.0.4103.61. The vulnerability was reported by Woojin Oh(@pwn_expoit) of STEALIEN on April 21, 2020, and was fixed in Chrome version 83.0.4103.61 released in May 2020 (Chrome Release).

The vulnerability is classified as a use-after-free issue specifically affecting the reader mode functionality in Google Chrome on Android. It has been assigned a CVSS v3.1 base score of 9.6 (CRITICAL) with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H. The vulnerability is tracked under CWE-416 (Use After Free) (NVD).

When exploited, this vulnerability could allow a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. This could lead to arbitrary code execution outside the browser's sandbox environment (NVD).

The vulnerability requires user interaction and the attacker must first compromise the renderer process. The attack complexity is considered low, requiring no special privileges for exploitation (NVD).

The vulnerability was patched in Google Chrome version 83.0.4103.61. Users and administrators are advised to upgrade to this version or later. Multiple Linux distributions have also released security updates to address this vulnerability, including Debian, Fedora, and Gentoo (Debian Advisory, Gentoo Advisory).