Heap buffer overflow in Freetype in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS Details
- CVSS 3.1 Base Score: 9.6
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-freetypealma-upgrade-freetype-devel | May 4, 2022 | Nov 3, 2020 | |
| Alpine Linux | alpine-linux-upgrade-freetypealpine-linux-upgrade-firefox-esralpine-linux-upgrade-firefoxalpine-linux-upgrade-thunderbirdalpine-linux-upgrade-librewolf | Jan 4, 2021 | Nov 3, 2020 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-freetypeamazon-linux-ami-2-upgrade-freetype-debuginfoamazon-linux-ami-2-upgrade-freetype-demosamazon-linux-ami-2-upgrade-freetype-devel | Dec 10, 2020 | Nov 3, 2020 | |
| Amazon_linux_2023 | amazon-linux-2023-upgrade-freetypeamazon-linux-2023-upgrade-freetype-debuginfoamazon-linux-2023-upgrade-freetype-debugsourceamazon-linux-2023-upgrade-freetype-demosamazon-linux-2023-upgrade-freetype-demos-debuginfoamazon-linux-2023-upgrade-freetype-devel | Feb 17, 2025 | Oct 19, 2020 | |
| Arch Linux | arch-linux-upgrade-latest | Jul 11, 2025 | Nov 3, 2020 | |
| Centos_linux | — | centos-upgrade-chromium-browsercentos-upgrade-chromium-browser-debuginfocentos-upgrade-freetypecentos-upgrade-freetype-debuginfocentos-upgrade-freetype-debugsourcecentos-upgrade-freetype-demoscentos-upgrade-freetype-demos-debuginfocentos-upgrade-freetype-devel | Oct 28, 2020 | Oct 26, 2020 |
| Debian | debian-upgrade-freetype | Oct 23, 2020 | Oct 23, 2020 | |
| Freebsd | freebsd-upgrade-package-freetype2freebsd-upgrade-package-chromium | Oct 22, 2020 | Oct 22, 2020 | |
| Gentoo Linux | gentoo-linux-upgrade-mail-client-thunderbirdgentoo-linux-upgrade-mail-client-thunderbird-bingentoo-linux-upgrade-media-libs-freetypegentoo-linux-upgrade-www-client-chromiumgentoo-linux-upgrade-www-client-google-chromegentoo-linux-upgrade-www-client-operagentoo-linux-upgrade-www-client-opera-beta | Oct 26, 2020 | Oct 23, 2020 | |
| Google Chrome | google-chrome-upgrade-latest | Oct 21, 2020 | Oct 21, 2020 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-freetypehuawei-euleros-2_0_sp8-upgrade-freetype-devel | Dec 15, 2020 | Nov 3, 2020 | |
| Huawei Euleros 2_0_sp9 | huawei-euleros-2_0_sp9-upgrade-freetype | Dec 1, 2020 | Nov 3, 2020 | |
| Microsoft Edge | microsoft-edge-upgrade-latest | Nov 17, 2021 | Nov 3, 2020 | |
| Nutanix Ahv | nutanix-ahv-upgrade-latest | Jun 5, 2026 | Sep 19, 2022 | |
| Oracle Solaris | oracle-solaris-11-3-upgrade-system-library-freetype-2-2-10-4-0-175-3-36-0-24-1551oracle-solaris-11-4-upgrade-desktop-pdf-viewer-gsx-9-52-11-4-28-0-1-82-1oracle-solaris-11-4-upgrade-image-ghostscript-9-52-11-4-28-0-1-82-1oracle-solaris-11-4-upgrade-mail-thunderbird-78-5-0-11-4-28-0-1-82-2oracle-solaris-11-4-upgrade-system-library-freetype-2-2-10-4-11-4-28-0-1-82-1oracle-solaris-11-4-upgrade-web-browser-firefox-78-5-0-11-4-28-0-1-82-2oracle-solaris-11-4-upgrade-web-data-firefox-bookmarks-78-5-0-11-4-28-0-1-82-2 | Jan 19, 2021 | Nov 3, 2020 | |
| Oracle_linux | — | oracle-linux-upgrade-freetypeoracle-linux-upgrade-freetype-demosoracle-linux-upgrade-freetype-devel | Nov 9, 2020 | Oct 19, 2020 |
| Redhat Openshift | linuxrpm-upgrade-redhat-coreos | Mar 12, 2021 | Nov 3, 2020 | |
| Redhat_linux | redhat-upgrade-freetyperedhat-upgrade-freetype-debuginforedhat-upgrade-freetype-debugsourceredhat-upgrade-freetype-demosredhat-upgrade-freetype-demos-debuginforedhat-upgrade-freetype-devel | Oct 28, 2020 | Oct 26, 2020 | |
| Rocky_linux | rocky-upgrade-freetyperocky-upgrade-freetype-debuginforocky-upgrade-freetype-debugsourcerocky-upgrade-freetype-devel | Mar 12, 2024 | Nov 3, 2020 | |
| Suse | — | suse-upgrade-chromedriversuse-upgrade-chromiumsuse-upgrade-freetype2-develsuse-upgrade-freetype2-devel-32bitsuse-upgrade-freetype2-profile-tti35suse-upgrade-ft2demossuse-upgrade-ftbenchsuse-upgrade-ftdiffsuse-upgrade-ftdumpsuse-upgrade-ftgammasuse-upgrade-ftgridsuse-upgrade-ftinspectsuse-upgrade-ftlintsuse-upgrade-ftmultisuse-upgrade-ftstringsuse-upgrade-ftvalidsuse-upgrade-ftviewsuse-upgrade-gnsuse-upgrade-libfreetype6suse-upgrade-libfreetype6-32bitsuse-upgrade-mozillafirefoxsuse-upgrade-mozillafirefox-branding-upstreamsuse-upgrade-mozillafirefox-buildsymbolssuse-upgrade-mozillafirefox-develsuse-upgrade-mozillafirefox-translations-commonsuse-upgrade-mozillafirefox-translations-othersuse-upgrade-mozillathunderbirdsuse-upgrade-mozillathunderbird-translations-commonsuse-upgrade-mozillathunderbird-translations-othersuse-upgrade-operasuse-upgrade-python3-cairosvgsuse-upgrade-python3-pillowsuse-upgrade-python3-pillow-tk | Oct 23, 2020 | Oct 20, 2020 |
| Ubuntu | ubuntu-pro-upgrade-libfreetype6ubuntu-upgrade-libfreetype6 | Oct 21, 2020 | Oct 20, 2020 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Nov 3, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub