CVE-2020-6556: Debian Linux

High severity, CVSS 8.8. EPSS: 3.3% chance of exploitation in the next 30 days.

Heap buffer overflow in SwiftShader in Google Chrome prior to 84.0.4147.135 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Affected products

  • Debian Debian Linux: version 10.0 only
  • Fedoraproject Fedora: version 33 only
  • Google Chrome: before 84.0.4147.125 (fixed in 84.0.4147.125)
  • Opensuse Leap: version 15.1 only; version 15.2 only

Published 2020-09-21. Last modified 2026-06-17.