CVE-2020-15999
Google Chrome FreeType
Google Chrome FreeType Heap Buffer Overflow Vulnerability
What it is
Google Chrome uses FreeType, an open-source software library to render fonts, which contains a heap buffer overflow vulnerability in the function Load_SBit_Png when processing PNG images embedded into fonts. This vulnerability is part of an exploit chain with CVE-2020-17087 on Windows and CVE-2020-16010 on Android.
What to do
Apply updates per vendor instructions.
Vendor notices and references
Description and required action as published by CISA. Full record at NVD.
Other Google entries on the list
- Chromium Google Chromium Use-After-Free Vulnerability CVE-2026-125350 · Nov 10, 2026
- Brotli Google Brotli Unchecked Return Value Vulnerability CVE-2026-111497 · Oct 27, 2026
- Pixel Google Pixel Improper Authorization Vulnerability CVE-2026-58704 · Sep 16, 2026
- Chromium V8 Google Chromium V8 Out of Bounds Write Vulnerability CVE-2026-87491 · Sep 9, 2026
- Chromium V8 Google Chromium V8 Type Confusion Vulnerability CVE-2026-85046 · Sep 4, 2026
- Chromium V8 Google Chromium V8 Out-of-Bounds Read and Write Vulnerability CVE-2026-11645 · Jun 9, 2026