USN-4593-1 — freetype vulnerability

Summary

Sergei Glazunov discovered that FreeType did not correctly handle certain
malformed font files. If a user were tricked into using a specially crafted
font file, a remote attacker could cause FreeType to crash or possibly
execute arbitrary code with user privileges.

Fixed packages 3

Release	Package	Fixed in
Ubuntu · 16.04 LTS 16.04:LTS	freetype	2.6.1-0.1ubuntu2.5
Ubuntu · 18.04 LTS 18.04:LTS	freetype	2.8.1-2ubuntu2.1
Ubuntu · 20.04 LTS 20.04:LTS	freetype	2.10.1-2ubuntu0.1

Vulnerabilities 1

Critical 9.6

CVE-2020-15999 Exploited Public exploit EPSS 64%

Heap buffer overflow in CefSharp

Heap buffer overflow in Freetype in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Google Chrome chromium-browser firefox-esr Browsers Debian Ubuntu Azure Linux Alpine NuGet

Nov 3, 2020
KEV Nov 3, 2021

References

report
https://ubuntu.com/security/CVE-2020-15999

freetype vulnerability

Summary

Fixed packages 3

Vulnerabilities 1

Heap buffer overflow in CefSharp

References