Browse / CVEs / CVE-2020-15999
CVE-2020-15999· google / chrome freetype· CWE-787
Google Chrome FreeType Heap Buffer Overflow Vulnerability
Exploited in the wild. Listed by CISA on 2021-11-03; known to be used by ransomware.
63.9%likelihood of exploitation, next 30 days
99%of all CVEs are less likely
Nonecheck to confirm it
Google Chrome uses FreeType, an open-source software library to render fonts, which contains a heap buffer overflow vulnerability in the function Load_SBit_Png when processing PNG images embedded into fonts. This vulnerability is part of an exploit chain with CVE-2020-17087 on Windows and CVE-2020-16010 on Android.
No ready check is stored for this CVE. Confirm it by hand from the references.
References
Use this check only on systems you are authorised to test. Where the data comes from