CVE-2020-16012

MEDIUM

Google Chrome < 87.0.4280.66 - Side-Channel Information Leakage via Graphics

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 3 public exploits for CVE-2020-16012. PoCs published by aleksejspopovs, leopoldabgn, helidem.

AI-analyzed exploit summary This repository contains a proof-of-concept exploit for CVE-2020-16012, a side-channel vulnerability in Firefox and Chromium's CanvasRenderingContext2D.drawImage() implementation. The exploit demonstrates the recovery of cross-origin image silhouettes via timing attacks.

Description

Side-channel information leakage in graphics in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to leak cross-origin data via a crafted HTML page.

Exploits (3)

nomisec WORKING POC 11 stars
by aleksejspopovs · poc
https://github.com/aleksejspopovs/cve-2020-16012

This repository contains a proof-of-concept exploit for CVE-2020-16012, a side-channel vulnerability in Firefox and Chromium's CanvasRenderingContext2D.drawImage() implementation. The exploit demonstrates the recovery of cross-origin image silhouettes via timing attacks.

Classification
Working Poc 90%
Attack Type
Info Leak
Complexity
Moderate
Reliability
Reliable
Target: Firefox < 78, Chromium < 84
No auth needed
Prerequisites: Victim must visit a malicious webpage · CPU rendering must be enabled
devstral-2 · analyzed Feb 16, 2026 Full analysis →
nomisec WORKING POC
by leopoldabgn · poc
https://github.com/leopoldabgn/CVE-2020-16012-PoC

This repository contains a Proof of Concept (PoC) for CVE-2020-16012, a side-channel vulnerability in Firefox and Chromium's CanvasRenderingContext2D.drawImage() implementation. The PoC includes client-side JavaScript to exploit the timing attack and a Python server to process and visualize the leaked pixel data.

Classification
Working Poc 95%
Attack Type
Info Leak
Complexity
Moderate
Reliability
Reliable
Target: Firefox and Chromium (specifically Chrome Version 83)
No auth needed
Prerequisites: Access to a vulnerable browser version · Network access to the Python server
devstral-2 · analyzed Feb 16, 2026 Full analysis →
nomisec WORKING POC
by helidem · poc
https://github.com/helidem/CVE-2020-16012-PoC

This PoC demonstrates a side-channel attack (CVE-2020-16012) against Chrome 83 by exploiting timing differences in canvas rendering to reconstruct pixel data from a target image. The server collects timing data and generates a grayscale image based on the side-channel leakage.

Classification
Working Poc 95%
Attack Type
Info Leak
Complexity
Moderate
Reliability
Reliable
Target: Google Chrome 83
No auth needed
Prerequisites: Chrome 83 with specific flags (--disable-gpu, --disable-software-rasterizer, --no-sandbox) · Python server with Flask and PIL dependencies
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (2)

Core 2
Core References
Exploit, Issue Tracking, Patch, Vendor Advisory x_refsource_misc
https://crbug.com/1088224

Scores

CVSS v3 4.3
EPSS 0.0247
EPSS Percentile 82.5%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Details

Status published
Products (2)
google/chrome < 87.0.4280.66
mozilla/firefox < 83.0
Published Jan 08, 2021
Tracked Since Feb 18, 2026