CVE-2020-6534: 
Google Chrome vulnerability analysis and mitigation

A heap buffer overflow vulnerability (CVE-2020-6534) was discovered in WebRTC component of Google Chrome versions prior to 84.0.4147.89. This vulnerability was disclosed on July 22, 2020, and affects the WebRTC functionality in Google Chrome browsers (NVD, Chrome Release).

The vulnerability is classified as a heap buffer overflow in the WebRTC component that could be exploited through a crafted HTML page. It has been assigned a CVSS v3.1 base score of 8.8 (High), with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. The vulnerability is categorized under CWE-787 (Out-of-bounds Write) (NVD).

If successfully exploited, this vulnerability could allow a remote attacker to potentially exploit heap corruption via a crafted HTML page, potentially leading to arbitrary code execution with the privileges of the Chrome browser process (NVD).

The vulnerability requires user interaction (such as visiting a malicious webpage) to be exploited. The attack complexity is rated as Low, requiring no privileges and can be executed remotely, though user interaction is required (NVD).

The vulnerability was fixed in Google Chrome version 84.0.4147.89. Users and administrators are advised to upgrade to this version or later. Multiple Linux distributions have also released security updates to address this vulnerability, including Debian, Fedora, and Gentoo (Debian Advisory, Gentoo Advisory).