CVE-2020-6544: 
Google Chrome vulnerability analysis and mitigation

Use after free vulnerability (CVE-2020-6544) was discovered in the media component of Google Chrome versions prior to 84.0.4147.125. This security flaw allowed remote attackers to potentially exploit heap corruption through a specially crafted HTML page (Chrome Release, NVD).

The vulnerability is classified as a Use-After-Free (CWE-416) and Out-of-bounds Write (CWE-787) issue. It received a CVSS v3.1 base score of 8.8 (HIGH) with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, indicating high severity with potential for complete compromise of confidentiality, integrity, and availability (NVD).

If successfully exploited, this vulnerability could lead to heap corruption, potentially allowing attackers to execute arbitrary code within the context of the browser. The high CVSS score indicates severe potential impacts on system confidentiality, integrity, and availability (NVD).

The vulnerability requires user interaction through a crafted HTML page for exploitation. It was reported by Tim Becker of Theori on July 22, 2020, and Google awarded a bounty of $7,500 for the discovery (Chrome Release).

The vulnerability was patched in Google Chrome version 84.0.4147.125. Users and administrators are advised to upgrade to this version or later to mitigate the risk. The fix was also incorporated into various Linux distributions including Debian, Fedora, and Gentoo through their respective security updates (Debian Advisory, Fedora Update, Gentoo Advisory).