CVE-2020-15999

ADVISORY - github

Summary

A memory corruption bug(Heap overflow) in the FreeType font rendering library.

This can be exploited by attackers to execute arbitrary code by using specially crafted fonts with embedded PNG images .

Google is aware of reports that an exploit for CVE-2020-15999 exists in the wild.

Upgrade to 85.3.130 or higher

EPSS Score⁠: 0.92732 (0.997)

ADVISORY - nist

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Out-of-bounds Write

ADVISORY - github

Improper Restriction of Operations within the Bounds of a Memory Buffer

Out-of-bounds Write

ADVISORY - gitlab

OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities

Improper Restriction of Operations within the Bounds of a Memory Buffer

Out-of-bounds Write

OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities

ADVISORY - redhat

Heap-based Buffer Overflow

Integer Overflow or Wraparound

See which of your images are affected by this CVE and how to fix them by signing into Docker Scout.