High 1 exploited CVE ELSA-2020-4952 1 CVE

Important: freetype security update (Oracle Linux 8)

Published Nov 13, 2020 · Updated Nov 13, 2020

Ecosystem: Oracle Linux

Summary

[2.9.1-4.el8_3.1]
- Test bitmap size earlier for PNGs
- Fix memory leak in pngshim.c
- Resolves: #1891905

Fixed packages 2

Release	Package	Fixed in
Oracle Linux · 8	freetype	0:2.9.1-4.el8_3.1
Oracle Linux · 8	freetype-devel	0:2.9.1-4.el8_3.1

Vulnerabilities 1

Critical 9.6

CVE-2020-15999 Exploited Public exploit EPSS 64%

Heap buffer overflow in CefSharp

Heap buffer overflow in Freetype in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Google Chrome chromium-browser firefox-esr Browsers Debian Ubuntu Azure Linux Alpine NuGet

Nov 3, 2020
KEV Nov 3, 2021