kritisch
CVE-2020-15999
freetype: Heap-based buffer overflow due to integer truncation in Load_SBit_Png
In der Trivy Database seit spätestens 24. Okt. 2026, 07:11 UTCWann der Eintrag vor diesem Build hinzukam, ist nicht erfasst.
Einstufung nach Quelle
NVD9.6CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
GHSA6.5CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Red Hat8.6CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
Julia9.7CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Trivys eigenes Label ist CRITICAL. Kritisch laut NVD, CBL-Mariner, Julia, Photon OS. Niedriger laut Red Hat (hoch), AlmaLinux (hoch), Amazon (hoch), Oracle (hoch), Ubuntu (hoch), GHSA (mittel).
Beschreibung
Heap buffer overflow in Freetype in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Betroffene Pakete und behobene Versionen
| Quelle | Paket | Behoben in |
|---|---|---|
| CBL-Mariner 1.0 | freetype | 0:2.11.1-1.cm1 |
| CBL-Mariner 2.0 | freetype | 0:2.11.1-1.cm2 |
| julia::Julia Ecosystem Security Advisories | FreeType2_jll | 2.10.4+0 |
| Photon OS 1.0 | freetype2 | 2.7.1-7.ph1 |
| Photon OS 2.0 | freetype2 | 2.7.1-6.ph2 |
| Photon OS 3.0 | freetype2 | 2.9.1-2.ph3 |
| Photon OS 4.0 | freetype2, freetype2-devel | 2.10.2-3.ph4 |
| alma 8 | freetype, freetype-devel | 2.9.1-4.el8_3.1 |
| alpine 3.10 | freetype | 2.10.0-r1 |
| alpine 3.11 | freetype | 2.10.1-r1 |
| alpine 3.12 | firefox, firefox-esr, freetype | 83.0-r0 und 2 weitere |
| alpine 3.13 | firefox, firefox-esr, freetype | 83.0-r0 und 2 weitere |
Alle 127 Einträge aus 59 Quellen zeigen
| Quelle | Paket | Behoben in |
|---|---|---|
| CBL-Mariner 1.0 | freetype | 0:2.11.1-1.cm1 |
| CBL-Mariner 2.0 | freetype | 0:2.11.1-1.cm2 |
| julia::Julia Ecosystem Security Advisories | FreeType2_jll | 2.10.4+0 |
| Photon OS 1.0 | freetype2 | 2.7.1-7.ph1 |
| Photon OS 2.0 | freetype2 | 2.7.1-6.ph2 |
| Photon OS 3.0 | freetype2 | 2.9.1-2.ph3 |
| Photon OS 4.0 | freetype2 | 2.10.2-3.ph4 |
| Photon OS 4.0 | freetype2-devel | 2.10.2-3.ph4 |
| alma 8 | freetype | 2.9.1-4.el8_3.1 |
| alma 8 | freetype-devel | 2.9.1-4.el8_3.1 |
| alpine 3.10 | freetype | 2.10.0-r1 |
| alpine 3.11 | freetype | 2.10.1-r1 |
| alpine 3.12 | firefox | 83.0-r0 |
| alpine 3.12 | firefox-esr | 78.5.0-r0 |
| alpine 3.12 | freetype | 2.10.4-r0 |
| alpine 3.13 | firefox | 83.0-r0 |
| alpine 3.13 | firefox-esr | 78.5.0-r0 |
| alpine 3.13 | freetype | 2.10.4-r0 |
| alpine 3.14 | firefox | 83.0-r0 |
| alpine 3.14 | firefox-esr | 78.5.0-r0 |
| alpine 3.14 | freetype | 2.10.4-r0 |
| alpine 3.15 | firefox | 83.0-r0 |
| alpine 3.15 | firefox-esr | 78.5.0-r0 |
| alpine 3.15 | freetype | 2.10.4-r0 |
| alpine 3.16 | firefox | 83.0-r0 |
| alpine 3.16 | firefox-esr | 78.5.0-r0 |
| alpine 3.16 | freetype | 2.10.4-r0 |
| alpine 3.16 | thunderbird | 78.5.1-r0 |
| alpine 3.17 | firefox | 83.0-r0 |
| alpine 3.17 | firefox-esr | 78.5.0-r0 |
| alpine 3.17 | freetype | 2.10.4-r0 |
| alpine 3.17 | thunderbird | 78.5.1-r0 |
| alpine 3.18 | firefox | 83.0-r0 |
| alpine 3.18 | firefox-esr | 78.5.0-r0 |
| alpine 3.18 | freetype | 2.10.4-r0 |
| alpine 3.18 | thunderbird | 78.5.1-r0 |
| alpine 3.19 | firefox | 83.0-r0 |
| alpine 3.19 | firefox-esr | 78.5.0-r0 |
| alpine 3.19 | freetype | 2.10.4-r0 |
| alpine 3.19 | thunderbird | 78.5.1-r0 |
| alpine 3.20 | firefox | 83.0-r0 |
| alpine 3.20 | firefox-esr | 78.5.0-r0 |
| alpine 3.20 | freetype | 2.10.4-r0 |
| alpine 3.20 | thunderbird | 78.5.1-r0 |
| alpine 3.21 | firefox | 83.0-r0 |
| alpine 3.21 | firefox-esr | 78.5.0-r0 |
| alpine 3.21 | freetype | 2.10.4-r0 |
| alpine 3.21 | librewolf | 83.0-r0 |
| alpine 3.21 | thunderbird | 78.5.1-r0 |
| alpine 3.22 | firefox | 83.0-r0 |
| alpine 3.22 | firefox-esr | 78.5.0-r0 |
| alpine 3.22 | freetype | 2.10.4-r0 |
| alpine 3.22 | librewolf | 83.0-r0 |
| alpine 3.22 | thunderbird | 78.5.1-r0 |
| alpine 3.23 | firefox | 83.0-r0 |
| alpine 3.23 | firefox-esr | 78.5.0-r0 |
| alpine 3.23 | freetype | 2.10.4-r0 |
| alpine 3.23 | librewolf | 83.0-r0 |
| alpine 3.23 | thunderbird | 78.5.1-r0 |
| alpine 3.24 | freetype | 2.10.4-r0 |
| alpine 3.24 | librewolf | 83.0-r0 |
| alpine 3.9 | freetype | 2.9.1-r3 |
| alpine edge | freetype | 2.10.4-r0 |
| alpine edge | librewolf | 83.0-r0 |
| amazon linux 2 | freetype | 2.8-14.amzn2.1 |
| amazon linux 2 | freetype-debuginfo | 2.8-14.amzn2.1 |
| amazon linux 2 | freetype-demos | 2.8-14.amzn2.1 |
| amazon linux 2 | freetype-devel | 2.8-14.amzn2.1 |
| amazon linux 2022 | freetype | 2.11.0-6.amzn2022.0.1 |
| amazon linux 2022 | freetype-debuginfo | 2.11.0-6.amzn2022.0.1 |
| amazon linux 2022 | freetype-debugsource | 2.11.0-6.amzn2022.0.1 |
| amazon linux 2022 | freetype-demos | 2.11.0-6.amzn2022.0.1 |
| amazon linux 2022 | freetype-demos-debuginfo | 2.11.0-6.amzn2022.0.1 |
| amazon linux 2022 | freetype-devel | 2.11.0-6.amzn2022.0.1 |
| amazon linux 2023 | freetype | 2.12.1-3.amzn2023.0.1 |
| amazon linux 2023 | freetype-debuginfo | 2.12.1-3.amzn2023.0.1 |
| amazon linux 2023 | freetype-debugsource | 2.12.1-3.amzn2023.0.1 |
| amazon linux 2023 | freetype-demos | 2.12.1-3.amzn2023.0.1 |
| amazon linux 2023 | freetype-demos-debuginfo | 2.12.1-3.amzn2023.0.1 |
| amazon linux 2023 | freetype-devel | 2.12.1-3.amzn2023.0.1 |
| debian 10 | chromium | 87.0.4280.88-0.4~deb10u1 |
| debian 10 | freetype | 2.9.1-3+deb10u2 |
| debian 11 | freetype | 2.10.2+dfsg-4 |
| debian 12 | freetype | 2.10.2+dfsg-4 |
| debian 13 | freetype | 2.10.2+dfsg-4 |
| debian 14 | freetype | 2.10.2+dfsg-4 |
| debian 9 | freetype | 2.6.3-3.2+deb9u2 |
| echo | freetype | 2.10.2+dfsg-4 |
| nuget::GitHub Security Advisory NuGet | CefSharp.Common | 85.3.130 |
| nuget::GitHub Security Advisory NuGet | CefSharp.WinForms | 85.3.130 |
| nuget::GitHub Security Advisory NuGet | CefSharp.Wpf | 85.3.130 |
| nuget::GitHub Security Advisory NuGet | CefSharp.Wpf.HwndHost | 85.3.130 |
| nuget::GitHub Security Advisory NuGet | cefsharp.common | 85.3.130 |
| nuget::GitHub Security Advisory NuGet | cefsharp.winforms | 85.3.130 |
| nuget::GitHub Security Advisory NuGet | cefsharp.wpf | 85.3.130 |
| nuget::GitHub Security Advisory NuGet | cefsharp.wpf.hwndhost | 85.3.130 |
| Oracle Linux 7 | freetype | 2.8-14.el7_9.1 |
| Oracle Linux 7 | freetype-demos | 2.8-14.el7_9.1 |
| Oracle Linux 7 | freetype-devel | 2.8-14.el7_9.1 |
| Oracle Linux 8 | freetype | 2.9.1-4.el8_3.1 |
| Oracle Linux 8 | freetype-devel | 2.9.1-4.el8_3.1 |
| rocky 8 | freetype | 2.9.1-4.el8_3.1 |
| rocky 8 | freetype-devel | 2.9.1-4.el8_3.1 |
| root.io debian 12 | rootio-freetype | 2.10.2+dfsg-4 |
| seal Red Hat 6 | freetype | 2.3.11-19.el6_10+sp999 |
| seal Red Hat 6 | seal-freetype | 2.3.11-19.el6_10+sp999 |
| seal Red Hat 7 | freetype | 2.8-14.el7_9.1+sp999 |
| seal Red Hat 7 | seal-freetype | 2.8-14.el7_9.1+sp999 |
| ubuntu 14.04-ESM | freetype | 2.5.2-1ubuntu2.8+esm2 |
| ubuntu 16.04 | chromium-browser | 86.0.4240.198-0ubuntu0.16.04.1 |
| ubuntu 16.04 | freetype | 2.6.1-0.1ubuntu2.5 |
| ubuntu 16.04-ESM | freetype | 2.6.1-0.1ubuntu2.5 |
| ubuntu 18.04 | chromium-browser | 86.0.4240.198-0ubuntu0.18.04.1 |
| ubuntu 18.04 | freetype | 2.8.1-2ubuntu2.1 |
| ubuntu 18.04-ESM | freetype | 2.8.1-2ubuntu2.1 |
| ubuntu 20.04 | freetype | 2.10.1-2ubuntu0.1 |
| ubuntu 20.04-ESM | freetype | 2.10.1-2ubuntu0.1 |
| ubuntu 20.10 | freetype | 2.10.2+dfsg-3ubuntu1 |
| ubuntu 21.04 | freetype | 2.10.2+dfsg-3ubuntu1 |
| ubuntu 21.10 | freetype | 2.10.2+dfsg-3ubuntu1 |
| ubuntu 22.04 | freetype | 2.10.2+dfsg-3ubuntu1 |
| ubuntu 22.10 | freetype | 2.10.2+dfsg-3ubuntu1 |
| ubuntu 23.04 | freetype | 2.10.2+dfsg-3ubuntu1 |
| ubuntu 23.10 | freetype | 2.10.2+dfsg-3ubuntu1 |
| ubuntu 24.04 | freetype | 2.10.2+dfsg-3ubuntu1 |
| ubuntu 24.10 | freetype | 2.10.2+dfsg-3ubuntu1 |
| ubuntu 25.04 | freetype | 2.10.2+dfsg-3ubuntu1 |
Referenzen
- http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00016.html
- http://seclists.org/fulldisclosure/2020/Nov/33
- https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15999.json
- https://access.redhat.com/security/cve/CVE-2020-15999
- https://bugs.chromium.org/p/project-zero/issues/detail?id=2103
- https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop_20.html
- https://crbug.com/1139963
- https://errata.almalinux.org/8/ALSA-2020-4952.html
Alle 32 Referenzen
- https://github.com/cefsharp/CefSharp
- https://github.com/cefsharp/CefSharp/security/advisories/GHSA-pv36-h7jh-qm62
- https://googleprojectzero.blogspot.com/p/rca-cve-2020-15999.html
- https://linux.oracle.com/cve/CVE-2020-15999.html
- https://linux.oracle.com/errata/ELSA-2020-4952.html
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/J3QVIGAAJ4D62YEJAJJWMCCBCOQ6TVL7
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/J3QVIGAAJ4D62YEJAJJWMCCBCOQ6TVL7/
- https://nvd.nist.gov/vuln/detail/CVE-2020-15999
- https://security.gentoo.org/glsa/202011-12
- https://security.gentoo.org/glsa/202012-04
- https://security.gentoo.org/glsa/202401-19
- https://security.netapp.com/advisory/ntap-20240812-0001
- https://security.netapp.com/advisory/ntap-20240812-0001/
- https://ubuntu.com/security/notices/USN-4593-1
- https://ubuntu.com/security/notices/USN-4593-2
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-15999
- https://www.cve.org/CVERecord?id=CVE-2020-15999
- https://www.debian.org/security/2021/dsa-4824
- https://www.mozilla.org/en-US/security/advisories/mfsa2020-52/#CVE-2020-15999
- https://www.nuget.org/packages/CefSharp.Common
- https://www.nuget.org/packages/CefSharp.WinForms
- https://www.nuget.org/packages/CefSharp.Wpf
- https://www.nuget.org/packages/CefSharp.Wpf.HwndHost