CVE-2016-0808

MEDIUM · 6.2 CVSS Gepubliceerd: 07-02-2016 CWE-19

Beschrijving

Integer overflow in the getCoverageFormat12 function in CmapCoverage.cpp in the Minikin library in Android 5.x before 5.1.1 LMY49G and 6.x before 2016-02-01 allows attackers to cause a denial of service (continuous rebooting) via an application that triggers loading of a crafted TTF font, aka internal bug 25645298.

Vendors

Google

Affected products

Android

References

source.android.com
android.googlesource.com