Buffer overflow in Chromium affecting multiple packages

Snyk reviews CVE-2020-15999, a FreeType buffer overflow discovered by Google Project Zero that can lead to arbitrary code execution when Chromium’s handling of PNG-embedded fonts truncates 32-bit dimensions to 16-bit, causing undersized allocations; Snyk identified six downstream open-source packages (multiple .NET Chromium components and a Java/Webjars package) affected by vulnerable Chromium components and highlights the need for developers to update to patched versions.