Unicode International Components For Unicode vulnerabilities

2 vulnerabilities

Known vulnerabilities in Unicode International Components For Unicode, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

RoutineCVE-2025-5222unicode · international_components_for_unicode +26 more1y agoIcu: stack buffer overflow in the srbroot::addtag functionA stack buffer overflow was found in Internationl components for unicode (ICU ). While running the genrb binary, the 'subtag' struct overflowed at the SRBRoot::addTag function. This issue may lead to memory corruption and local arbitrary code execution.CVSS7.0HighEPSS0.44%RoutineCVE-2020-21913debian · debian_linux +19 more5y agodebian debian_linuxInternational Components for Unicode (ICU-20850) v66.1 was discovered to contain a use after free bug in the pkg_createWithAssemblyCode function in the file tools/pkgdata/pkgdata.cpp.CVSS5.5MediumEPSS1.21%