CVE-2016-2414

Name of the Vulnerable Software and Affected Versions Android versions 5.0.0 through 5.0.1 Android versions 5.1.0 through 5.1.0 Android versions 6.0.0 through 2016-03-31

Description The issue exists due to the lack of validation for negative font property values in the Minikin library of the Android operating system. Exploitation of this issue can allow a local attacker to cause a denial of service (memory corruption) using a specially crafted font. Remote attackers can also cause a denial of service (memory corruption and reboot loop) via a crafted font.

Recommendations For Android versions 5.0.0 through 5.0.1, update to version 5.0.2 or later. For Android versions 5.1.0 through 5.1.0, update to version 5.1.1 or later. For Android versions 6.0.0 through 2016-03-31, apply the patch available as of 2016-04-01.