Heap buffer overflow in Freetype in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVE-2020-15999

- -------------------------------------------------------------------------
Debian Security Advisory DSA-4824-1                   security@debian.org
https://www.debian.org/security/                       Moritz Muehlenhoff
January 01, 2021                      https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package        : chromium
CVE ID         : CVE-2019-8075 CVE-2020-6510 CVE-2020-6511 CVE-2020-6512 
                 CVE-2020-6513 CVE-2020-6514 CVE-2020-6515 CVE-2020-6516 
                 CVE-2020-6517 CVE-2020-6518 CVE-2020-6519 CVE-2020-6520 
                 CVE-2020-6521 CVE-2020-6522 CVE-2020-6523 CVE-2020-6524 
                 CVE-2020-6525 CVE-2020-6526 CVE-2020-6527 CVE-2020-6528 
                 CVE-2020-6529 CVE-2020-6530 CVE-2020-6531 CVE-2020-6532 
                 CVE-2020-6533 CVE-2020-6534 CVE-2020-6535 CVE-2020-6536 
                 CVE-2020-6537 CVE-2020-6538 CVE-2020-6539 CVE-2020-6540 
                 CVE-2020-6541 CVE-2020-6542 CVE-2020-6543 CVE-2020-6544 
                 CVE-2020-6545 CVE-2020-6546 CVE-2020-6547 CVE-2020-6548 
                 CVE-2020-6549 CVE-2020-6550 CVE-2020-6551 CVE-2020-6552 
                 CVE-2020-6553 CVE-2020-6554 CVE-2020-6555 CVE-2020-6556 
                 CVE-2020-6557 CVE-2020-6558 CVE-2020-6559 CVE-2020-6560 
                 CVE-2020-6561 CVE-2020-6562 CVE-2020-6563 CVE-2020-6564 
                 CVE-2020-6565 CVE-2020-6566 CVE-2020-6567 CVE-2020-6568 
                 CVE-2020-6569 CVE-2020-6570 CVE-2020-6571 CVE-2020-6573 
                 CVE-2020-6574 CVE-2020-6575 CVE-2020-6576 CVE-2020-15959 
                 CVE-2020-15960 CVE-2020-15961 CVE-2020-15962 CVE-2020-15963 
                 CVE-2020-15964 CVE-2020-15965 CVE-2020-15966 CVE-2020-15967 
                 CVE-2020-15968 CVE-2020-15969 CVE-2020-15970 CVE-2020-15971 
                 CVE-2020-15972 CVE-2020-15973 CVE-2020-15974 CVE-2020-15975 
                 CVE-2020-15976 CVE-2020-15977 CVE-2020-15978 CVE-2020-15979 
                 CVE-2020-15980 CVE-2020-15981 CVE-2020-15982 CVE-2020-15983 
                 CVE-2020-15984 CVE-2020-15985 CVE-2020-15986 CVE-2020-15987 
                 CVE-2020-15988 CVE-2020-15989 CVE-2020-15990 CVE-2020-15991 
                 CVE-2020-15992 CVE-2020-15999 CVE-2020-16000 CVE-2020-16001 
                 CVE-2020-16002 CVE-2020-16003 CVE-2020-16004 CVE-2020-16005 
                 CVE-2020-16006 CVE-2020-16007 CVE-2020-16008 CVE-2020-16009 
                 CVE-2020-16011 CVE-2020-16012 CVE-2020-16013 CVE-2020-16014 
                 CVE-2020-16015 CVE-2020-16016 CVE-2020-16017 CVE-2020-16018 
                 CVE-2020-16019 CVE-2020-16020 CVE-2020-16021 CVE-2020-16022 
                 CVE-2020-16023 CVE-2020-16024 CVE-2020-16025 CVE-2020-16026 
                 CVE-2020-16027 CVE-2020-16028 CVE-2020-16029 CVE-2020-16030 
                 CVE-2020-16031 CVE-2020-16032 CVE-2020-16033 CVE-2020-16034 
                 CVE-2020-16035 CVE-2020-16036 CVE-2020-16037 CVE-2020-16038 
                 CVE-2020-16039 CVE-2020-16040 CVE-2020-16041 CVE-2020-16042

Multiple security issues were discovered in the Chromium web browser, which
could result in the execution of arbitrary code, denial of service
or information disclosure.

For the stable distribution (buster), these problems have been fixed in
version 87.0.4280.88-0.4~deb10u1.

We recommend that you upgrade your chromium packages.

For the detailed security status of chromium please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/chromium

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: debian-security-announce@lists.debian.org


<hr />
Debian Security Advisory DSA-4824-1 <a href="mailto:security@debian.org">security@debian.org</a>
<a href="https://www.debian.org/security/">https://www.debian.org/security/</a> Moritz Muehlenhoff
January 01, 2021 <a href="https://www.debian.org/security/faq">https://www.debian.org/security/faq</a>
<hr />
Package : chromium
CVE ID : CVE-2019-8075 CVE-2020-6510 CVE-2020-6511 CVE-2020-6512 
 CVE-2020-6513 CVE-2020-6514 CVE-2020-6515 CVE-2020-6516 
 CVE-2020-6517 CVE-2020-6518 CVE-2020-6519 CVE-2020-6520 
 CVE-2020-6521 CVE-2020-6522 CVE-2020-6523 CVE-2020-6524 
 CVE-2020-6525 CVE-2020-6526 CVE-2020-6527 CVE-2020-6528 
 CVE-2020-6529 CVE-2020-6530 CVE-2020-6531 CVE-2020-6532 
 CVE-2020-6533 CVE-2020-6534 CVE-2020-6535 CVE-2020-6536 
 CVE-2020-6537 CVE-2020-6538 CVE-2020-6539 CVE-2020-6540 
 CVE-2020-6541 CVE-2020-6542 CVE-2020-6543 CVE-2020-6544 
 CVE-2020-6545 CVE-2020-6546 CVE-2020-6547 CVE-2020-6548 
 CVE-2020-6549 CVE-2020-6550 CVE-2020-6551 CVE-2020-6552 
 CVE-2020-6553 CVE-2020-6554 CVE-2020-6555 CVE-2020-6556 
 CVE-2020-6557 CVE-2020-6558 CVE-2020-6559 CVE-2020-6560 
 CVE-2020-6561 CVE-2020-6562 CVE-2020-6563 CVE-2020-6564 
 CVE-2020-6565 CVE-2020-6566 CVE-2020-6567 CVE-2020-6568 
 CVE-2020-6569 CVE-2020-6570 CVE-2020-6571 CVE-2020-6573 
 CVE-2020-6574 CVE-2020-6575 CVE-2020-6576 CVE-2020-15959 
 CVE-2020-15960 CVE-2020-15961 CVE-2020-15962 CVE-2020-15963 
 CVE-2020-15964 CVE-2020-15965 CVE-2020-15966 CVE-2020-15967 
 CVE-2020-15968 CVE-2020-15969 CVE-2020-15970 CVE-2020-15971 
 CVE-2020-15972 CVE-2020-15973 CVE-2020-15974 CVE-2020-15975 
 CVE-2020-15976 CVE-2020-15977 CVE-2020-15978 CVE-2020-15979 
 CVE-2020-15980 CVE-2020-15981 CVE-2020-15982 CVE-2020-15983 
 CVE-2020-15984 CVE-2020-15985 CVE-2020-15986 CVE-2020-15987 
 CVE-2020-15988 CVE-2020-15989 CVE-2020-15990 CVE-2020-15991 
 CVE-2020-15992 CVE-2020-15999 CVE-2020-16000 CVE-2020-16001 
 CVE-2020-16002 CVE-2020-16003 CVE-2020-16004 CVE-2020-16005 
 CVE-2020-16006 CVE-2020-16007 CVE-2020-16008 CVE-2020-16009 
 CVE-2020-16011 CVE-2020-16012 CVE-2020-16013 CVE-2020-16014 
 CVE-2020-16015 CVE-2020-16016 CVE-2020-16017 CVE-2020-16018 
 CVE-2020-16019 CVE-2020-16020 CVE-2020-16021 CVE-2020-16022 
 CVE-2020-16023 CVE-2020-16024 CVE-2020-16025 CVE-2020-16026 
 CVE-2020-16027 CVE-2020-16028 CVE-2020-16029 CVE-2020-16030 
 CVE-2020-16031 CVE-2020-16032 CVE-2020-16033 CVE-2020-16034 
 CVE-2020-16035 CVE-2020-16036 CVE-2020-16037 CVE-2020-16038 
 CVE-2020-16039 CVE-2020-16040 CVE-2020-16041 CVE-2020-16042
Multiple security issues were discovered in the Chromium web browser, which
could result in the execution of arbitrary code, denial of service
or information disclosure.
For the stable distribution (buster), these problems have been fixed in
version 87.0.4280.88-0.4~deb10u1.
We recommend that you upgrade your chromium packages.
For the detailed security status of chromium please refer to
its security tracker page at:
<a href="https://security-tracker.debian.org/tracker/chromium">https://security-tracker.debian.org/tracker/chromium</a>
Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: <a href="https://www.debian.org/security/">https://www.debian.org/security/</a>
Mailing list: <a href="mailto:debian-security-announce@lists.debian.org">debian-security-announce@lists.debian.org</a>

Debian

[SECURITY] [DSA 4824-1] chromium security update

**CentOS Errata and Security Advisory** CESA-2020:4907


FreeType is a free, high-quality, portable font engine that can open and manage font files. FreeType loads, hints, and renders individual glyphs efficiently.

Security Fix(es):

* freetype: Heap-based buffer overflow due to integer truncation in Load_SBit_Png (CVE-2020-15999)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

**Merged security bulletin from advisories:**
http://lists.centos.org/pipermail/centos-cr-announce/2020-November/012870.html

**Affected packages:**
freetype
freetype-demos
freetype-devel

**Upstream details at:**


CentOS Errata and Security Advisory CESA-2020:4907
FreeType is a free, high-quality, portable font engine that can open and manage font files. FreeType loads, hints, and renders individual glyphs efficiently.
Security Fix(es):
<ul>
<li>freetype: Heap-based buffer overflow due to integer truncation in Load_SBit_Png (CVE-2020-15999)</li>
</ul>
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Merged security bulletin from advisories:
<a href="http://lists.centos.org/pipermail/centos-cr-announce/2020-November/012870.html">http://lists.centos.org/pipermail/centos-cr-announce/2020-November/012870.html</a>
Affected packages:
freetype
freetype-demos
freetype-devel
Upstream details at:

Centos

freetype security update

FreeType is a free, high-quality, portable font engine that can open and manage font files. FreeType loads, hints, and renders individual glyphs efficiently.

Security Fix(es):

* freetype: Heap-based buffer overflow due to integer truncation in Load_SBit_Png (CVE-2020-15999)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

FreeType is a free, high-quality, portable font engine that can open and manage font files. FreeType loads, hints, and renders individual glyphs efficiently.
Security Fix(es):
<ul>
<li>freetype: Heap-based buffer overflow due to integer truncation in Load_SBit_Png (CVE-2020-15999)</li>
</ul>
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Redhat

(RHSA-2020:4949) Important: freetype security update

(RHSA-2020:4950) Important: freetype security update

(RHSA-2020:4951) Important: freetype security update

(RHSA-2020:4952) Important: freetype security update

(RHSA-2020:4907) Important: freetype security update

Chromium is an open-source web browser, powered by WebKit (Blink).

This update upgrades Chromium to version 86.0.4240.111.

Security Fix(es):

* chromium-browser: Inappropriate implementation in Blink (CVE-2020-16000)

* chromium-browser: Use after free in media (CVE-2020-16001)

* chromium-browser: Use after free in PDFium (CVE-2020-16002)

* freetype: Heap-based buffer overflow due to integer truncation in Load_SBit_Png (CVE-2020-15999)

* chromium-browser: Use after free in printing (CVE-2020-16003)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Chromium is an open-source web browser, powered by WebKit (Blink).
This update upgrades Chromium to version 86.0.4240.111.
Security Fix(es):
<ul>
<li>chromium-browser: Inappropriate implementation in Blink (CVE-2020-16000)
</li>
<li>chromium-browser: Use after free in media (CVE-2020-16001)
</li>
<li>chromium-browser: Use after free in PDFium (CVE-2020-16002)
</li>
<li>freetype: Heap-based buffer overflow due to integer truncation in Load_SBit_Png (CVE-2020-15999)
</li>
<li>chromium-browser: Use after free in printing (CVE-2020-16003)
</li>
</ul>
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

(RHSA-2020:4351) Important: chromium-browser security update

Featured CVEs

Feed of the featured CVEs from Vulcan Remedy Cloud.

Vulcan Remedy Cloud - Featured CVEs

Thank you for downloading from Remedy Cloud!

Please fill out the form to download the CSV

Your Script is On It's Way!

Tell us where to send the script

Your Email Was Successfully Sent!

Email

Your Name

Your fix has been sent successfully!

Suggest a Fix

Search for a CVE below to see all the available fixes

Remedy Cloud

Loading - Vulcan Remedy Cloud

The page you are looking for was moved, removed, renamed or might never existed.

CVE-2020-15999

33 fixes found:

Version Update

[SECURITY] [DSA 4824-1] chromium security update

Version Update

freetype security update

Version Update

(RHSA-2020:4949) Important: freetype security update

Version Update

(RHSA-2020:4950) Important: freetype security update

Version Update

(RHSA-2020:4951) Important: freetype security update

Version Update

(RHSA-2020:4952) Important: freetype security update

Version Update

(RHSA-2020:4907) Important: freetype security update

Version Update

(RHSA-2020:4351) Important: chromium-browser security update