CVE-2016-2414
CVE-2016-2414
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
The Minikin library in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 does not properly consider negative size values in font data, which allows remote attackers to cause a denial of service (memory corruption and reboot loop) via a crafted font, aka internal bug 26413177.
CVSS 6.2 · Media · EPSS 0,4%
- Publicación
- Actualización
Pila tecnológica: system
Productos y versiones afectados
Fuentes originales
- https://android.googlesource.com/platform/frameworks/minikin/+/f4785aa1947b8d22d5b19559ef1ca526d98e0e73
- https://android.googlesource.com/platform/frameworks/minikin/+/ca8ac8acdad662230ae37998c6c4091bb39402b6
- http://source.android.com/security/bulletin/2016-04-02.html
- https://code.google.com/p/android/issues/detail?id=192618
- https://nvd.nist.gov/vuln/detail/CVE-2016-2414