Heap Buffer Overflow

🗓️ 25 Oct 2020 12:34:11Reported by Veracode Vulnerability DatabaseType

veracode

veracode🔗 sca.analysiscenter.veracode.com👁 46 Views

FreeType integer truncation vulnerability in Load_SBit_Pn

Reporter	Title	Published	Views	Family All 296
GithubExploit	Exploit for Classic Buffer Overflow in Google Chrome	30 Dec 202019:58	–	githubexploit
FreeBSD	freetype2 -- heap buffer overlfow	20 Oct 202000:00	–	freebsd
FreeBSD	chromium -- multiple vulnerabilities	20 Oct 202000:00	–	freebsd
ALT Linux	Security fix for the ALT Linux 10 package thunderbird version 78.5.0-alt1	19 Nov 202000:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 10 package firefox-esr version 78.5.0-alt1	16 Nov 202000:00	–	altlinux
Tenable Nessus	Google Chrome < 86.0.4240.111 Multiple Vulnerabilities	20 Oct 202000:00	–	nessus
Tenable Nessus	Amazon Linux 2022 : freetype, freetype-demos, freetype-devel (ALAS2022-2022-033)	11 Dec 202400:00	–	nessus
Tenable Nessus	Amazon Linux 2022 : freetype, freetype-demos, freetype-devel (ALAS2022-2022-154)	20 Oct 202200:00	–	nessus
Tenable Nessus	Amazon Linux 2023 : freetype, freetype-demos, freetype-devel (ALAS2023-2023-074)	21 Mar 202300:00	–	nessus
Tenable Nessus	Amazon Linux 2 : freetype (ALAS-2020-1565)	9 Dec 202000:00	–	nessus

Vulners

Node

freetype freetypeMatch2.10.2-r0os

AND

alpinelinux alpine_linuxMatch3.12

OR

freetype freetypeMatch2.10.1-r0os

AND

alpinelinux alpine_linuxMatch3.11

OR

freetype freetypeMatch2.10.0-r0os

AND

alpinelinux alpine_linuxMatch3.10

OR

freetype freetypeMatch2.9.1-r2os

AND

alpinelinux alpine_linuxMatch3.9

OR

freetype freetypeMatch2.10.1-r0os

AND

freetype freetypeMatch2.10.2-r0os

AND

alpinelinux alpine_linuxMatchedge

OR

firefox-esr firefox-esrMatch68.8.0-r0os

AND

firefox-esr firefox-esrMatch68.5.0-r1os

AND

firefox-esr firefox-esrMatch68.6.1-r0os

AND

firefox-esr firefox-esrMatch68.7.0-r2os

AND

firefox-esr firefox-esrMatch68.6.0-r0os

AND

firefox-esr firefox-esrMatch68.7.0-r1os

AND

alpinelinux alpine_linuxMatchedge

OR

mozilla firefoxMatch75.0-r2os

AND

mozilla firefoxMatch76.0.1-r1os

AND

mozilla firefoxMatch75.0-r1os

AND

mozilla firefoxMatch76.0-r0os

AND

mozilla firefoxMatch73.0.1-r1os

AND

mozilla firefoxMatch76.0.1-r0os

AND

mozilla firefoxMatch74.0.1-r0os

AND

mozilla firefoxMatch74.0-r1os

AND

alpinelinux alpine_linuxMatchedge

OR

mozilla thunderbirdMatch68.6.0-r0os

AND

mozilla thunderbirdMatch68.7.0-r1os

AND

mozilla thunderbirdMatch68.5.0-r1os

AND

mozilla thunderbirdMatch68.8.0-r0os

AND

mozilla thunderbirdMatch68.7.0-r0os

AND

mozilla thunderbirdMatch68.6.0-r2os

AND

mozilla thunderbirdMatch68.8.1-r0os

AND

alpinelinux alpine_linuxMatchedge

Source	Link
seclists	www.seclists.org/fulldisclosure/2020/Nov/33
debian	www.debian.org/security/2021/dsa-4824
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/J3QVIGAAJ4D62YEJAJJWMCCBCOQ6TVL7/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/J3QVIGAAJ4D62YEJAJJWMCCBCOQ6TVL7/
security	www.security.gentoo.org/glsa/202011-12
security	www.security.gentoo.org/glsa/202012-04
security	www.security.gentoo.org/glsa/202401-19
chromereleases	www.chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop_20.html
crbug	www.crbug.com/1139963
googleprojectzero	www.googleprojectzero.blogspot.com/p/rca-cve-2020-15999.html

05 Feb 2025 15:29Current

3Low risk

Vulners AI Score3

CVSS 24.3

CVSS 3.19.6

EPSS0.93031

freetype buffer overflow heap-based integer truncation vulnerability