A AegiFlow
UNKNOWNKNOWN EXPLOITED

CVE-2020-15999

Google Chrome FreeType Heap Buffer Overflow Vulnerability

Published
2021-11-03
Modified
2026-07-31
Sources
cisa-kev

Summary

Google Chrome uses FreeType, an open-source software library to render fonts, which contains a heap buffer overflow vulnerability in the function Load_SBit_Png when processing PNG images embedded into fonts. This vulnerability is part of an exploit chain with CVE-2020-17087 on Windows and CVE-2020-16010 on Android.

References

Includes data from the CISA Known Exploited Vulnerabilities catalog.

CVE® is a registered trademark of The MITRE Corporation. CVE content reproduced under the CVE Terms of Use; copyright designation © MITRE.