Critical 1 exploited CVE RHSA-2020:4949 1 CVE

Red Hat Security Advisory: freetype security update

Published Sep 13, 2024 · Updated Jun 29, 2026

Ecosystem: Red Hat

Fixed packages 5

Release	Package	Fixed in
Red Hat · RHEL 8.0 E4S rhel_e4s:8.0::baseos	freetype	0:2.9.1-4.el8_0.1
Red Hat · RHEL 8.0 E4S rhel_e4s:8.0::baseos	freetype-debuginfo	0:2.9.1-4.el8_0.1
Red Hat · RHEL 8.0 E4S rhel_e4s:8.0::baseos	freetype-debugsource	0:2.9.1-4.el8_0.1
Red Hat · RHEL 8.0 E4S rhel_e4s:8.0::baseos	freetype-demos-debuginfo	0:2.9.1-4.el8_0.1
Red Hat · RHEL 8.0 E4S rhel_e4s:8.0::baseos	freetype-devel	0:2.9.1-4.el8_0.1

Vulnerabilities 1

Critical 9.6

CVE-2020-15999 Exploited Public exploit EPSS 64%

Heap buffer overflow in CefSharp

Heap buffer overflow in Freetype in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Google Chrome chromium-browser firefox-esr Browsers Debian Ubuntu Azure Linux Alpine NuGet

Nov 3, 2020
KEV Nov 3, 2021

References

article
https://access.redhat.com/security/updates/classification/#important
report
https://bugzilla.redhat.com/show_bug.cgi?id=1890210
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_4949.json
report
https://access.redhat.com/security/cve/CVE-2020-15999
advisory
https://www.cve.org/CVERecord?id=CVE-2020-15999
advisory
https://nvd.nist.gov/vuln/detail/CVE-2020-15999
article
https://www.cisa.gov/known-exploited-vulnerabilities-catalog