CVE-2020-15999

A flaw in the font-handling library (Freetype) used by Chrome allows an attacker to corrupt computer memory through a specially designed webpage. This could enable the attacker to execute malicious code or crash the browser.

Heap buffer overflow in Freetype's font parsing allows a remote attacker to write beyond allocated memory boundaries via crafted HTML. Exploitation requires user to visit a malicious webpage; successful exploitation results in heap corruption leading to potential code execution or denial of service.