CRITICALCVSS v3.1 9.6Actively exploited · CISA KEV since 2021-11-03Vulnerability

CVE-2020-15999

Google Chrome uses FreeType, an open-source software library to render fonts, which contains a heap buffer overflow vulnerability in the function Load_SBit_Png when processing PNG images embedded into fonts. This vulnerability is part of an exploit chain with CVE-2020-17087 on Windows and CVE-2020-16010 on Android.

Properties

Euvd product
Chrome
Vulnerability name
Google Chrome FreeType Heap Buffer Overflow Vulnerability
First seen
2025-10-21T23:35:33+00:00
Cvss score
9.6
Epss score
0.63894
Last seen
2026-10-19T12:00:27+00:00
Due date
2021-11-17
Euvd assigner
Chrome
Retrieved at
2026-10-21T01:24:47+00:00
Exploited euvd since
2021-11-03T00:00:00+00:00
Src batch id
epss_history-20261020T103617Z-728ddd
Source url
https://epss.empiricalsecurity.com/epss_scores-2026-10-19.csv.gz
Date added
2021-11-03
Score
9.6
Euvd base score version
3.1
Fetched at
2026-10-20T10:36:20+00:00
Euvd vendor
Google
Cvss vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
In Signal since
initial import (Sep 2026)
Euvd base score
9.6

Related Entities (10)

AFFECTS_PRODUCT (6)

→[Product]cpe:2.3:a:opensuse:backports_sle:15.0:sp2:*:*:*:*:*:*
→[Product]cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*
→[Product]cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
→[Product]cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*
→[Product]cpe:2.3:a:freetype:freetype:*:*:*:*:*:*:*:*
→[Product]cpe:2.3:a:netapp:ontap_select_deploy_administration_utility:-:*:*:*:*:*:*:*

HAS_WEAKNESS (2)

→[Weakness]Out-of-bounds Write
→[Weakness]Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

DESCRIBES (1)

←[KEVEntry]Google Chrome FreeType Heap Buffer Overflow Vulnerability

INVOLVES (1)

←[Signal]kev_added · 2021-11-03

Explore deeper with Ninja Signal's threat intelligence graph

Search in SpektrOpen Signal Desktop
CVE-2020-15999 (CVSS v3.1 9.6) — Ninja Signal Threat Intelligence | Ninja Signal