CVE-2020-6520: 
Google Chrome vulnerability analysis and mitigation

CVE-2020-6520 is a buffer overflow vulnerability discovered in the Skia graphics engine component of Google Chrome versions prior to 84.0.4147.89. The vulnerability was disclosed and patched in July 2020. This security flaw affects the Skia component, which is a critical graphics processing library used in Chrome (NVD, Chrome Release).

The vulnerability is classified as a heap buffer overflow in the Skia graphics engine that could be triggered via a crafted HTML page. It has been assigned a CVSS v3.1 base score of 8.8 (HIGH) with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, indicating that it is network exploitable with low attack complexity and requires user interaction (NVD).

If successfully exploited, this vulnerability could allow a remote attacker to potentially exploit heap corruption through a specially crafted HTML page, potentially leading to arbitrary code execution within the context of the browser (NVD, Gentoo).

The vulnerability requires user interaction, specifically visiting a maliciously crafted HTML page. The attack complexity is rated as low, indicating that the vulnerability is relatively straightforward to exploit once the conditions are met (NVD).

The vulnerability was patched in Google Chrome version 84.0.4147.89. Users and administrators should upgrade to this version or later to mitigate the risk. Various Linux distributions have also released security updates to address this vulnerability (Chrome Release, Debian).