CVE-2016-0808

Published: 7 February 2016

Integer overflow in the getCoverageFormat12 function in CmapCoverage.cpp in the Minikin library in Android 5.x before 5.1.1 LMY49G and 6.x before 2016-02-01 allows attackers to cause a denial of service (continuous rebooting) via an application that triggers loading of a crafted TTF font, aka internal bug 25645298.

Priority

Cvss 3 Severity Score

6.2

Score breakdown

Status

Package	Release	Status
android Launchpad, Ubuntu, Debian	precise	Does not exist
	trusty	Does not exist (trusty was ignored)
	upstream	Needs triage
	wily	Ignored
	xenial	Ignored
	yakkety	Ignored
	zesty	Ignored

Severity score breakdown

Parameter	Value
Base score	6.2
Attack vector	Local
Attack complexity	Low
Privileges required	None
User interaction	None
Scope	Unchanged
Confidentiality	None
Integrity impact	None
Availability impact	High
Vector	CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References

Join the discussion

Canonical is offering Expanded Security Maintenance

Canonical is offering Ubuntu Expanded Security Maintenance (ESM) for security fixes and essential packages.

Find out more about ESM ›