Threat intelligence / Vulnerability
CVE-2020-15999
Google Chrome uses FreeType, an open-source software library to render fonts, which contains a heap buffer overflow vulnerability in the function Load_SBit_Png when processing PNG images embedded into fonts. This vulnerability is part of an exploit chain with CVE-2020-17087 on Windows and CVE-2020-16010 on Android.
Vulnerability
TypeVulnerability
External ID—
First seen2021-11-03
Last seen2021-11-03
Confidence
—
Google Chrome uses FreeType, an open-source software library to render fonts, which contains a heap buffer overflow vulnerability in the function Load_SBit_Png when processing PNG images embedded into fonts. This vulnerability is part of an exploit chain with CVE-2020-17087 on Windows and CVE-2020-16010 on Android.
Labels
CISA KEV context
Vendor / productGoogle Chrome FreeType
Added2021-11-03
Due date2021-11-17
1 recorded
Relationships
2 external