Known Exploited Vulnerabilities · CISA KEV Catalog

CVE-2020-15999: Google Chrome Free Type Heap Buffer Overflow Vulnerability

Google Chrome uses FreeType, an open-source software library to render fonts, which contains a heap buffer overflow vulnerability in the function Load_SBit_Png when processing PNG images embedded into fonts. This vulnerability is part of an exploit chain with CVE-2020-17087 on Windows and CVE-2020-16010 on Android.

Read the original at CISA KEV Catalog ↗

Topics
Vulnerabilities & Patching
Mentions
CVE-2020-15999Google
Related
CVE-2026-125350: Google Chromium Use-After-Free Vulnerability Known Exploited Vulnerabilities · Nov 10, 2026
CVE-2026-111497: Google Brotli Unchecked Return Value Vulnerability Known Exploited Vulnerabilities · Oct 27, 2026
CVE-2026-58704: Google Pixel Improper Authorization Vulnerability Known Exploited Vulnerabilities · Sep 16, 2026