Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
cve-2020-16012 — PoC for CVE-2020-16012, a timing side channel in drawImage in Firefox & Chrome | Kitploit
Tools/GitHubGitHub/aleksejspopovs/cve-2020-16012
ReconnaissanceVulnerability AnalysisExploitationInformation GatheringWeb Security
GitHubaleksejspopovs/cve-2020-16012

cve-2020-16012

PoC for CVE-2020-16012, a timing side channel in drawImage in Firefox & Chrome

View Repository
11505 years agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

This repo contains PoCs for CVE-2020-16012, a side channel vulnerability in the implementation of CanvasRenderingContext2D.drawImage() in Firefox and Chromium.

Read a writeup of this vulnerability on the Mozilla Attack & Defense blog.

Inside benchmark is code for measuring the timing of the operations involved, as well as the results of the benchmark obtained on Firefox 76 and Chromium 83 running on Linux using CPU rendering.

Inside exploit is an example exploit that recovers the silhouette of a cross-origin image using this vulnerability, as well as a recording of the exploit in action.

Download Tool