Vulnerabilities CVE-2020-15999

CVE-2020-15999

Medium

Open

KEV

TLP:CLEAR

Google Chrome FreeType Heap Buffer Overflow Vulnerability

NVD CVE.org

AI Analysis

No AI analysis yet.

Description

Google — Chrome FreeType — Google Chrome uses FreeType, an open-source software library to render fonts, which contains a heap buffer overflow vulnerability in the function Load_SBit_Png when processing PNG images embedded into fonts. This vulnerability is part of an exploit chain with CVE-2020-17087 on Windows and CVE-2020-16010 on Android.

Details

EPSS Score ⓘ: 44.30%

98.6th percentile
Confidence: 100%
CISA KEV
Date Added: Nov 3, 2021
Patch Due: Nov 17, 2021
Required Action: Apply updates per vendor instructions.

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.