cve/2020/CVE-2020-6449.md

CVE-2020-6449

Description

Use after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

POC

Reference

• http://packetstormsecurity.com/files/172843/Chrome-WebAudio-Use-After-Free.html

Github

• https://github.com/BOB-Jour/Chromium-Bug-Hunting-Project
• https://github.com/De4dCr0w/Browser-pwn
• https://github.com/HackOvert/awesome-bugs
• https://github.com/alphaSeclab/sec-daily-2020
• https://github.com/hwiwonl/dayone
• https://github.com/scratchadams/Heap-Resources