ByteOS Network

Vulnerability Details :

CVE-2020-15999

Assigner-Chrome

Assigner Org ID-ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28

Published At-03 Nov, 2020 | 00:00

Updated At-30 Jul, 2025 | 01:45

Google Chrome FreeType Heap Buffer Overflow Vulnerability

Google Chrome uses FreeType, an open-source software library to render fonts, which contains a heap buffer overflow vulnerability in the function Load_SBit_Png when processing PNG images embedded into fonts. This vulnerability is part of an exploit chain with CVE-2020-17087 on Windows and CVE-2020-16010 on Android.

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

▼Known Exploited Vulnerabilities (KEV)

cisa.gov

Vendor:

Google LLC

Product:Chrome FreeType

Added At:03 Nov, 2021

Due At:17 Nov, 2021

Google Chrome FreeType Heap Buffer Overflow Vulnerability

Used in Ransomware

Unknown

CWE

CWE-787

Required Action:

Apply updates per vendor instructions.

Additional Notes:

https://nvd.nist.gov/vuln/detail/CVE-2020-15999

▼Common Vulnerabilities and Exposures (CVE)

cve.org

Assigner:Chrome

Assigner Org ID:ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28

Published At:03 Nov, 2020 | 00:00

Updated At:30 Jul, 2025 | 01:45

▼CVE Numbering Authority (CNA)

Heap buffer overflow in Freetype in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Affected Products

Vendor

Google LLC

Product

Chrome

Versions

Affected

From unspecified before 86.0.4240.111 (custom)

Problem Types

Type	CWE ID	Description
text	N/A	Heap buffer overflow

Type: text

CWE ID: N/A

Description: Heap buffer overflow

References

Hyperlink	Resource
https://crbug.com/1139963	N/A
https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop_20.html	N/A
http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00016.html	vendor-advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/J3QVIGAAJ4D62YEJAJJWMCCBCOQ6TVL7/	vendor-advisory
https://security.gentoo.org/glsa/202011-12	vendor-advisory
http://seclists.org/fulldisclosure/2020/Nov/33	mailing-list
https://security.gentoo.org/glsa/202012-04	vendor-advisory
https://www.debian.org/security/2021/dsa-4824	vendor-advisory
https://googleprojectzero.blogspot.com/p/rca-cve-2020-15999.html	N/A
https://security.gentoo.org/glsa/202401-19	vendor-advisory

Hyperlink: https://crbug.com/1139963

Resource: N/A

Hyperlink: https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop_20.html

Resource: N/A

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00016.html

Resource:

vendor-advisory

Hyperlink: https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/J3QVIGAAJ4D62YEJAJJWMCCBCOQ6TVL7/

Resource:

vendor-advisory

Hyperlink: https://security.gentoo.org/glsa/202011-12

Resource:

vendor-advisory

Hyperlink: http://seclists.org/fulldisclosure/2020/Nov/33

Resource:

mailing-list

Hyperlink: https://security.gentoo.org/glsa/202012-04

Resource:

vendor-advisory

Hyperlink: https://www.debian.org/security/2021/dsa-4824

Resource:

vendor-advisory

Hyperlink: https://googleprojectzero.blogspot.com/p/rca-cve-2020-15999.html

Resource: N/A

Hyperlink: https://security.gentoo.org/glsa/202401-19

Resource:

vendor-advisory

▼Authorized Data Publishers (ADP)

1. CVE Program Container

References

Hyperlink	Resource
https://crbug.com/1139963	x_transferred
https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop_20.html	x_transferred
http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00016.html	vendor-advisory x_transferred
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/J3QVIGAAJ4D62YEJAJJWMCCBCOQ6TVL7/	vendor-advisory x_transferred
https://security.gentoo.org/glsa/202011-12	vendor-advisory x_transferred
http://seclists.org/fulldisclosure/2020/Nov/33	mailing-list x_transferred
https://security.gentoo.org/glsa/202012-04	vendor-advisory x_transferred
https://www.debian.org/security/2021/dsa-4824	vendor-advisory x_transferred
https://googleprojectzero.blogspot.com/p/rca-cve-2020-15999.html	x_transferred
https://security.gentoo.org/glsa/202401-19	vendor-advisory x_transferred
https://security.netapp.com/advisory/ntap-20240812-0001/	N/A

Hyperlink: https://crbug.com/1139963

Resource:

x_transferred

Hyperlink: https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop_20.html

Resource:

x_transferred

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00016.html

Resource:

vendor-advisory

x_transferred

Hyperlink: https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/J3QVIGAAJ4D62YEJAJJWMCCBCOQ6TVL7/

Resource:

vendor-advisory

x_transferred

Hyperlink: https://security.gentoo.org/glsa/202011-12

Resource:

vendor-advisory

x_transferred

Hyperlink: http://seclists.org/fulldisclosure/2020/Nov/33

Resource:

mailing-list

x_transferred

Hyperlink: https://security.gentoo.org/glsa/202012-04

Resource:

vendor-advisory

x_transferred

Hyperlink: https://www.debian.org/security/2021/dsa-4824

Resource:

vendor-advisory

x_transferred

Hyperlink: https://googleprojectzero.blogspot.com/p/rca-cve-2020-15999.html

Resource:

x_transferred

Hyperlink: https://security.gentoo.org/glsa/202401-19

Resource:

vendor-advisory

x_transferred

Hyperlink: https://security.netapp.com/advisory/ntap-20240812-0001/

Resource: N/A

2. CISA ADP Vulnrichment

Problem Types

Type	CWE ID	Description
CWE	CWE-120	CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Type: CWE

CWE ID: CWE-120

Description: CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Metrics

Version	Base score	Base severity	Vector
3.1	9.6	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Version: 3.1

Base score: 9.6

Base severity: CRITICAL

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Metrics Other Info

kev

dateAdded:

2021-11-03

reference:

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-15999

Timeline

Event	Date
CVE-2020-15999 added to CISA KEV	2021-11-03 00:00:00

Event: CVE-2020-15999 added to CISA KEV

Date: 2021-11-03 00:00:00

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:chrome-cve-admin@google.com

Published At:03 Nov, 2020 | 03:15

Updated At:05 Feb, 2025 | 14:37

Heap buffer overflow in Freetype in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CISA Catalog

Date Added	Due Date	Vulnerability Name	Required Action
2021-11-03	2021-11-17	Google Chrome FreeType Heap Buffer Overflow Vulnerability	Apply updates per vendor instructions.

Date Added: 2021-11-03

Due Date: 2021-11-17

Vulnerability Name: Google Chrome FreeType Heap Buffer Overflow Vulnerability

Required Action: Apply updates per vendor instructions.

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	9.6	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Secondary	3.1	9.6	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Primary	2.0	4.3	MEDIUM	AV:N/AC:M/Au:N/C:N/I:N/A:P

Type: Primary

Version: 3.1

Base score: 9.6

Base severity: CRITICAL

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Type: Secondary

Version: 3.1

Base score: 9.6

Base severity: CRITICAL

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Type: Primary

Version: 2.0

Base score: 4.3

Base severity: MEDIUM

Vector:

AV:N/AC:M/Au:N/C:N/I:N/A:P

CPE Matches

Google LLC

>>chrome>>Versions before 86.0.4240.111(exclusive)

cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*

freetype>>freetype>>Versions from 2.6.0(inclusive) to 2.10.4(exclusive)

cpe:2.3:a:freetype:freetype:*:*:*:*:*:*:*:*

Debian GNU/Linux

>>debian_linux>>10.0

cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*

Fedora Project

>>fedora>>31

cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*

openSUSE

>>backports_sle>>15.0

cpe:2.3:a:opensuse:backports_sle:15.0:sp2:*:*:*:*:*:*

NetApp, Inc.

>>ontap_select_deploy_administration_utility>>-

cpe:2.3:a:netapp:ontap_select_deploy_administration_utility:-:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-787	Primary	nvd@nist.gov
CWE-120	Secondary	134c704f-9b21-4f2e-91b3-4a467353bcc0

CWE ID: CWE-787

Type: Primary

Source: nvd@nist.gov

CWE ID: CWE-120

Type: Secondary

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

References

Hyperlink	Source	Resource
http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00016.html	chrome-cve-admin@google.com	Broken Link Mailing List Third Party Advisory
http://seclists.org/fulldisclosure/2020/Nov/33	chrome-cve-admin@google.com	Mailing List Not Applicable Third Party Advisory
https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop_20.html	chrome-cve-admin@google.com	Third Party Advisory
https://crbug.com/1139963	chrome-cve-admin@google.com	Exploit Issue Tracking Third Party Advisory
https://googleprojectzero.blogspot.com/p/rca-cve-2020-15999.html	chrome-cve-admin@google.com	Exploit Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/J3QVIGAAJ4D62YEJAJJWMCCBCOQ6TVL7/	chrome-cve-admin@google.com	Release Notes
https://security.gentoo.org/glsa/202011-12	chrome-cve-admin@google.com	Third Party Advisory
https://security.gentoo.org/glsa/202012-04	chrome-cve-admin@google.com	Third Party Advisory
https://security.gentoo.org/glsa/202401-19	chrome-cve-admin@google.com	Third Party Advisory
https://www.debian.org/security/2021/dsa-4824	chrome-cve-admin@google.com	Mailing List Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00016.html	af854a3a-2127-422b-91ae-364da2661108	Broken Link Mailing List Third Party Advisory
http://seclists.org/fulldisclosure/2020/Nov/33	af854a3a-2127-422b-91ae-364da2661108	Mailing List Not Applicable Third Party Advisory
https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop_20.html	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
https://crbug.com/1139963	af854a3a-2127-422b-91ae-364da2661108	Exploit Issue Tracking Third Party Advisory
https://googleprojectzero.blogspot.com/p/rca-cve-2020-15999.html	af854a3a-2127-422b-91ae-364da2661108	Exploit Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/J3QVIGAAJ4D62YEJAJJWMCCBCOQ6TVL7/	af854a3a-2127-422b-91ae-364da2661108	Release Notes
https://security.gentoo.org/glsa/202011-12	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
https://security.gentoo.org/glsa/202012-04	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
https://security.gentoo.org/glsa/202401-19	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
https://security.netapp.com/advisory/ntap-20240812-0001/	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
https://www.debian.org/security/2021/dsa-4824	af854a3a-2127-422b-91ae-364da2661108	Mailing List Third Party Advisory

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00016.html

Source: chrome-cve-admin@google.com

Resource:

Broken Link

Mailing List

Third Party Advisory

Hyperlink: http://seclists.org/fulldisclosure/2020/Nov/33

Source: chrome-cve-admin@google.com

Resource:

Mailing List

Not Applicable

Third Party Advisory

Hyperlink: https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop_20.html

Source: chrome-cve-admin@google.com

Resource:

Third Party Advisory

Hyperlink: https://crbug.com/1139963

Source: chrome-cve-admin@google.com

Resource:

Exploit

Issue Tracking

Third Party Advisory

Hyperlink: https://googleprojectzero.blogspot.com/p/rca-cve-2020-15999.html

Source: chrome-cve-admin@google.com

Resource:

Exploit

Third Party Advisory

Hyperlink: https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/J3QVIGAAJ4D62YEJAJJWMCCBCOQ6TVL7/

Source: chrome-cve-admin@google.com

Resource:

Release Notes

Hyperlink: https://security.gentoo.org/glsa/202011-12

Source: chrome-cve-admin@google.com

Resource:

Third Party Advisory

Hyperlink: https://security.gentoo.org/glsa/202012-04

Source: chrome-cve-admin@google.com

Resource:

Third Party Advisory

Hyperlink: https://security.gentoo.org/glsa/202401-19

Source: chrome-cve-admin@google.com

Resource:

Third Party Advisory

Hyperlink: https://www.debian.org/security/2021/dsa-4824

Source: chrome-cve-admin@google.com

Resource:

Mailing List

Third Party Advisory

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00016.html