CVE-2020-16010
Google Chrome for Android UI Heap Buffer Overflow Vulnerability
Published Nov 2, 2020 · updated Jun 16, 2026 · google chrome
Google Chrome for Android UI contains a heap buffer overflow vulnerability that allows a remote attacker, who has compromised the renderer process, to potentially perform a sandbox escape via a crafted HTML page.
Timeline
Detection, updates, and resolution for this record.
Nov 2, 2020 · Catalog
Detected
Google Chrome for Android UI contains a heap buffer overflow vulnerability that allows a remote attacker, who has compromised the renderer process, to potentially perform a sandbox escape via a crafted HTML page.
Nov 3, 2021 · CISA KEV
Known exploited
Apply updates per vendor instructions.
May 3, 2022 · CISA KEV
Remediation due
Apply updates per vendor instructions.
Jun 16, 2026 · Catalog
Updated
Google Chrome for Android UI contains a heap buffer overflow vulnerability that allows a remote attacker, who has compromised the renderer process, to potentially perform a sandbox escape via a crafted HTML page.
Required action
Apply updates per vendor instructions.
CISA due date May 3, 2022
Affected
- cpe google/chromeversion unspecified
- vendor Google Chrome for Android UIversion unspecified
Sources
- CISA KEVCVE-2020-16010
Google Chrome for Android UI contains a heap buffer overflow vulnerability that allows a remote attacker, who has compromised the renderer process, to potentially perform a sandbox escape via a crafted HTML page.
cisa.gov - CVE.orgCVE-2020-16010
Official CVE identifier
cve.org - FIRST EPSSCVE-2020-16010
30-day exploitation probability 6.4%
first.org - NIST NVDCVE-2020-16010
Heap buffer overflow in UI in Google Chrome on Android prior to 86.0.4240.185 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
nvd.nist.gov