CVE-2016-0808

—

CVSS 3.0

6.2 medium

EPSS

<1%p8

Published

Feb 7, 2016 (Feb 7, 2016)

Modified

Jun 17, 2026

Description

Integer overflow in the getCoverageFormat12 function in CmapCoverage.cpp in the Minikin library in Android 5.x before 5.1.1 LMY49G and 6.x before 2016-02-01 allows attackers to cause a denial of service (continuous rebooting) via an application that triggers loading of a crafted TTF font, aka internal bug 25645298.

Vendors: google
Products: android
Weakness: CWE-19
Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news0 stories

No ingested article mentions this CVE yet.