CVE-2020-16040
MEDIUM EXPLOITEDGoogle Chrome versions before 87.0.4280.88 integer overflow during SimplfiedLowering phase
Title source: metasploitExploitation Summary
CVE-2020-16040 has been observed exploited in the wild (reported by VulnCheck KEV).
EIP tracks 3 public exploits from researchers including r4j0x00, Rajvardhan Agarwal (r4j), including a Metasploit module exploits/multi/browser/chrome_simplifiedlowering_overflow.
AI-analyzed exploit summary This exploit leverages a heap corruption vulnerability in Google Chrome's V8 engine (CVE-2020-16040) to achieve remote code execution. It uses WebAssembly and crafted JavaScript to manipulate memory, achieve arbitrary read/write, and execute shellcode on a RWX page.
Description
Insufficient data validation in V8 in Google Chrome prior to 87.0.4280.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Exploits (3)
This exploit leverages a heap corruption vulnerability in Google Chrome's V8 engine (CVE-2020-16040) to achieve remote code execution. It uses WebAssembly and crafted JavaScript to manipulate memory, achieve arbitrary read/write, and execute shellcode on a RWX page.
This exploit leverages an integer overflow in Google Chrome's SimplifiedLowering phase to achieve arbitrary read/write in the isolate region, followed by RWX memory allocation via WebAssembly to execute shellcode. It requires the browser to be run with --no-sandbox for full payload execution.
References (5)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H