CVE-2016-0808: Google Android

Medium severity, CVSS 6.2. EPSS: 0.2% chance of exploitation in the next 30 days.

Integer overflow in the getCoverageFormat12 function in CmapCoverage.cpp in the Minikin library in Android 5.x before 5.1.1 LMY49G and 6.x before 2016-02-01 allows attackers to cause a denial of service (continuous rebooting) via an application that triggers loading of a crafted TTF font, aka internal bug 25645298.

Affected products

• Google Android: version 5.0 only; version 5.0.1 only; version 5.0.2 only; version 5.1 only; version 5.1.0 only; version 5.1.1 only; …

Published 2016-02-07. Last modified 2026-06-17.