High 1 exploited CVE ELSA-2020-4907 1 CVE

Important: freetype security update (Oracle Linux 7)

Published Nov 6, 2020 · Updated Nov 6, 2020

Ecosystem: Oracle Linux

Summary

[2.8-14.el7_9.1]
- Test bitmap size earlier for PNGs
- Fix memory leak in pngshim.c
- Resolves: #1891635

Fixed packages 3

Release	Package	Fixed in
Oracle Linux · 7	freetype	0:2.8-14.el7_9.1
Oracle Linux · 7	freetype-demos	0:2.8-14.el7_9.1
Oracle Linux · 7	freetype-devel	0:2.8-14.el7_9.1

Vulnerabilities 1

Critical 9.6

CVE-2020-15999 Exploited Public exploit EPSS 64%

Heap buffer overflow in CefSharp

Heap buffer overflow in Freetype in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Google Chrome chromium-browser firefox-esr Browsers Debian Ubuntu Azure Linux Alpine NuGet

Nov 3, 2020
KEV Nov 3, 2021