CVE-2020-6540: 
Google Chrome vulnerability analysis and mitigation

A buffer overflow vulnerability was identified in the Skia component of Google Chrome versions prior to 84.0.4147.105. This vulnerability, tracked as CVE-2020-6540, allows a remote attacker to potentially exploit heap corruption through a specially crafted HTML page (Chrome Release, NVD).

The vulnerability is classified as a heap buffer overflow in the Skia graphics engine component of Chrome. It has been assigned a CVSS v3.1 base score of 8.8 (HIGH) with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, indicating that it can be exploited remotely with low attack complexity, requires no privileges but does need user interaction, and can result in high impacts to confidentiality, integrity, and availability (NVD).

If successfully exploited, this vulnerability could allow an attacker to corrupt heap memory through a specially crafted HTML page, potentially leading to arbitrary code execution within the context of the browser (NVD).

The vulnerability requires user interaction, specifically visiting a maliciously crafted HTML page. The attack can be executed remotely with low attack complexity, making it an attractive target for potential attackers (NVD).

Google has addressed this vulnerability in Chrome version 84.0.4147.105. Users and administrators are strongly advised to upgrade to this version or later. The fix has also been incorporated into various Linux distributions including Debian, Fedora, and Gentoo through their respective security updates (Debian Advisory, Fedora Update, Gentoo Advisory).