CVE-2020-6514

MEDIUM

6.5

CVSS Score

Published: July 22, 2020 at 04:16 PM UTC

Updated: June 17, 2026 at 03:23 AM UTC

11 products affected across 6 vendorsDebian LinuxChromeFedora

Using Chrome by Google?

Get instant alerts when new vulnerabilities affect Chrome - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM6.5

Exploit prediction

EPSS 8%

Description

Inappropriate implementation in WebRTC in Google Chrome prior to 84.0.4147.89 allowed an attacker in a privileged network position to potentially exploit heap corruption via a crafted SCTP stream.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

iPadOS · Apple

95%

v < 13.6

Affected range stops below 13.6, so it looks safe — our inference, not a vendor statement

iPhone OS · Apple

95%

v < 13.6

Affected range stops below 13.6, so it looks safe — our inference, not a vendor statement

Safari · Apple

95%

v < 13.1.2

Affected range stops below 13.1.2, so it looks safe — our inference, not a vendor statement

tvOS · Apple

95%

v < 13.4.8

Affected range stops below 13.4.8, so it looks safe — our inference, not a vendor statement

watchOS · Apple

95%

v < 6.2.8

Affected range stops below 6.2.8, so it looks safe — our inference, not a vendor statement

Ubuntu Linux · Canonicalrubygems

95%

16.04 18.04 20.04

Debian Linux · Debiandrupal

95%

10.0 9.0

Fedora · Fedora Projectrpm

95%

31 32

Chrome · Googlenpm

95%

v < 84.0.4147.89

Affected range stops below 84.0.4147.89, so it looks safe — our inference, not a vendor statement

Backports Sle · openSUSE

95%

15.0 sp1 15.0 sp2

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references