Search for packages
Package details: pkg:deb/debian/icu@52.1-8%2Bdeb8u7
purl pkg:deb/debian/icu@52.1-8%2Bdeb8u7
Next non-vulnerable version 72.1-3
Latest non-vulnerable version 72.1-3
Risk 4.5
Vulnerabilities affecting this package (19)
Vulnerability Summary Fixed by
VCID-1vau-m61a-9bca
Aliases:
CVE-2016-0494
57.1-6+deb9u4
Affected by 7 other vulnerabilities.
VCID-79ef-qsqu-zfgd
Aliases:
CVE-2015-4760
57.1-6+deb9u4
Affected by 7 other vulnerabilities.
VCID-7uxp-cx7j-9ka3
Aliases:
CVE-2017-15422
Integer overflow in international date handling in International Components for Unicode (ICU) for C/C++ before 60.1, as used in V8 in Google Chrome prior to 63.0.3239.84 and other products, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.
57.1-6+deb9u4
Affected by 7 other vulnerabilities.
63.1-6+deb10u3
Affected by 4 other vulnerabilities.
VCID-8axv-ehyu-zqav
Aliases:
CVE-2020-10531
An issue was discovered in International Components for Unicode (ICU) for C/C++ through 66.1. An integer overflow, leading to a heap-based buffer overflow, exists in the UnicodeString::doAppend() function in common/unistr.cpp.
57.1-6+deb9u4
Affected by 7 other vulnerabilities.
63.1-6+deb10u3
Affected by 4 other vulnerabilities.
67.1-7
Affected by 1 other vulnerability.
VCID-e67w-s6np-c7ey
Aliases:
CVE-2015-4844
57.1-6+deb9u4
Affected by 7 other vulnerabilities.
VCID-j5nf-8hjw-2qh3
Aliases:
CVE-2014-8146
57.1-6+deb9u4
Affected by 7 other vulnerabilities.
VCID-jd5u-smut-1kga
Aliases:
CVE-2017-7867
57.1-6+deb9u4
Affected by 7 other vulnerabilities.
VCID-jktx-r8wk-ubek
Aliases:
CVE-2014-8147
57.1-6+deb9u4
Affected by 7 other vulnerabilities.
VCID-m3pm-3ghu-pbge
Aliases:
CVE-2016-6293
57.1-6+deb9u4
Affected by 7 other vulnerabilities.
VCID-qrqu-bfdx-huay
Aliases:
CVE-2015-1270
57.1-6+deb9u4
Affected by 7 other vulnerabilities.
VCID-saxq-p7en-gyet
Aliases:
CVE-2025-5222
A stack buffer overflow was found in Internationl components for unicode (ICU ). While running the genrb binary, the 'subtag' struct overflowed at the SRBRoot::addTag function. This issue may lead to memory corruption and local arbitrary code execution.
72.1-3
Affected by 0 other vulnerabilities.
VCID-se6t-x95k-7bhg
Aliases:
CVE-2014-9911
57.1-6+deb9u4
Affected by 7 other vulnerabilities.
VCID-vtvy-4wup-d7cs
Aliases:
CVE-2016-7415
57.1-6+deb9u4
Affected by 7 other vulnerabilities.
VCID-vu9x-gy3f-fkes
Aliases:
CVE-2017-14952
63.1-6+deb10u3
Affected by 4 other vulnerabilities.
VCID-xm9d-fx8j-cfgn
Aliases:
CVE-2017-7868
57.1-6+deb9u4
Affected by 7 other vulnerabilities.
VCID-xvtf-unp2-xudm
Aliases:
CVE-2018-18928
International Components for Unicode (ICU) for C/C++ 63.1 has an integer overflow in number::impl::DecimalQuantity::toScientificString() in i18n/number_decimalquantity.cpp.
63.1-6+deb10u3
Affected by 4 other vulnerabilities.
VCID-y6st-u7uj-kqek
Aliases:
CVE-2015-2632
57.1-6+deb9u4
Affected by 7 other vulnerabilities.
VCID-ywmu-5nne-1qdj
Aliases:
CVE-2020-21913
International Components for Unicode (ICU-20850) v66.1 was discovered to contain a use after free bug in the pkg_createWithAssemblyCode function in the file tools/pkgdata/pkgdata.cpp.
63.1-6+deb10u3
Affected by 4 other vulnerabilities.
67.1-7
Affected by 1 other vulnerability.
VCID-yxtk-z76x-9qc2
Aliases:
CVE-2021-30535
Double free in ICU in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
67.1-7
Affected by 1 other vulnerability.
Vulnerabilities fixed by this package (13)
Vulnerability Summary Aliases
VCID-1vau-m61a-9bca CVE-2016-0494
VCID-79ef-qsqu-zfgd CVE-2015-4760
VCID-7uxp-cx7j-9ka3 Integer overflow in international date handling in International Components for Unicode (ICU) for C/C++ before 60.1, as used in V8 in Google Chrome prior to 63.0.3239.84 and other products, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. CVE-2017-15422
VCID-e67w-s6np-c7ey CVE-2015-4844
VCID-j5nf-8hjw-2qh3 CVE-2014-8146
VCID-jd5u-smut-1kga CVE-2017-7867
VCID-jktx-r8wk-ubek CVE-2014-8147
VCID-m3pm-3ghu-pbge CVE-2016-6293
VCID-qrqu-bfdx-huay CVE-2015-1270
VCID-se6t-x95k-7bhg CVE-2014-9911
VCID-vtvy-4wup-d7cs CVE-2016-7415
VCID-xm9d-fx8j-cfgn CVE-2017-7868
VCID-y6st-u7uj-kqek CVE-2015-2632

Date Actor Action Vulnerability Source VulnerableCode Version
2025-08-01T20:15:12.708704+00:00 Debian Oval Importer Affected by VCID-vu9x-gy3f-fkes https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T19:08:17.510647+00:00 Debian Oval Importer Affected by VCID-j5nf-8hjw-2qh3 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T19:04:31.604209+00:00 Debian Oval Importer Affected by VCID-1vau-m61a-9bca https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T18:51:03.600889+00:00 Debian Oval Importer Affected by VCID-vtvy-4wup-d7cs https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T18:17:56.891242+00:00 Debian Oval Importer Affected by VCID-yxtk-z76x-9qc2 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T18:05:48.758130+00:00 Debian Oval Importer Affected by VCID-ywmu-5nne-1qdj https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T17:43:25.505662+00:00 Debian Oval Importer Affected by VCID-jd5u-smut-1kga https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T16:42:26.774542+00:00 Debian Oval Importer Affected by VCID-saxq-p7en-gyet https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T16:33:17.336695+00:00 Debian Oval Importer Affected by VCID-79ef-qsqu-zfgd https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T14:51:29.061606+00:00 Debian Oval Importer Affected by VCID-se6t-x95k-7bhg https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T14:36:23.770556+00:00 Debian Oval Importer Affected by VCID-y6st-u7uj-kqek https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T14:33:36.636580+00:00 Debian Oval Importer Affected by VCID-xvtf-unp2-xudm https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T14:22:20.710806+00:00 Debian Oval Importer Affected by VCID-e67w-s6np-c7ey https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T14:12:17.908114+00:00 Debian Oval Importer Affected by VCID-jktx-r8wk-ubek https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T13:53:42.947191+00:00 Debian Oval Importer Affected by VCID-qrqu-bfdx-huay https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T13:25:48.600633+00:00 Debian Oval Importer Affected by VCID-8axv-ehyu-zqav https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T13:02:40.300480+00:00 Debian Oval Importer Affected by VCID-xm9d-fx8j-cfgn https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T12:58:25.336116+00:00 Debian Oval Importer Affected by VCID-7uxp-cx7j-9ka3 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T12:58:22.166553+00:00 Debian Oval Importer Affected by VCID-m3pm-3ghu-pbge https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T11:39:43.881353+00:00 Debian Oval Importer Affected by VCID-8axv-ehyu-zqav https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 37.0.0
2025-08-01T11:33:55.222976+00:00 Debian Oval Importer Affected by VCID-ywmu-5nne-1qdj https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 37.0.0
2025-08-01T10:59:02.002491+00:00 Debian Oval Importer Affected by VCID-7uxp-cx7j-9ka3 https://www.debian.org/security/oval/oval-definitions-stretch.xml.bz2 37.0.0
2025-08-01T10:35:04.644804+00:00 Debian Oval Importer Affected by VCID-8axv-ehyu-zqav https://www.debian.org/security/oval/oval-definitions-stretch.xml.bz2 37.0.0
2025-08-01T10:30:43.728498+00:00 Debian Oval Importer Fixing VCID-m3pm-3ghu-pbge https://www.debian.org/security/oval/oval-definitions-jessie.xml.bz2 37.0.0
2025-08-01T10:23:10.347231+00:00 Debian Oval Importer Fixing VCID-qrqu-bfdx-huay https://www.debian.org/security/oval/oval-definitions-jessie.xml.bz2 37.0.0
2025-08-01T10:22:49.684333+00:00 Debian Oval Importer Fixing VCID-j5nf-8hjw-2qh3 https://www.debian.org/security/oval/oval-definitions-jessie.xml.bz2 37.0.0
2025-08-01T10:18:48.398189+00:00 Debian Oval Importer Fixing VCID-e67w-s6np-c7ey https://www.debian.org/security/oval/oval-definitions-jessie.xml.bz2 37.0.0
2025-08-01T10:17:00.300336+00:00 Debian Oval Importer Fixing VCID-se6t-x95k-7bhg https://www.debian.org/security/oval/oval-definitions-jessie.xml.bz2 37.0.0
2025-08-01T10:10:58.790835+00:00 Debian Oval Importer Fixing VCID-vtvy-4wup-d7cs https://www.debian.org/security/oval/oval-definitions-jessie.xml.bz2 37.0.0
2025-08-01T10:10:53.075987+00:00 Debian Oval Importer Fixing VCID-jktx-r8wk-ubek https://www.debian.org/security/oval/oval-definitions-jessie.xml.bz2 37.0.0
2025-08-01T10:05:55.516184+00:00 Debian Oval Importer Fixing VCID-xm9d-fx8j-cfgn https://www.debian.org/security/oval/oval-definitions-jessie.xml.bz2 37.0.0
2025-08-01T10:05:54.772992+00:00 Debian Oval Importer Fixing VCID-7uxp-cx7j-9ka3 https://www.debian.org/security/oval/oval-definitions-jessie.xml.bz2 37.0.0
2025-08-01T10:01:14.137447+00:00 Debian Oval Importer Fixing VCID-y6st-u7uj-kqek https://www.debian.org/security/oval/oval-definitions-jessie.xml.bz2 37.0.0
2025-08-01T09:57:07.684036+00:00 Debian Oval Importer Fixing VCID-1vau-m61a-9bca https://www.debian.org/security/oval/oval-definitions-jessie.xml.bz2 37.0.0
2025-08-01T09:56:03.368577+00:00 Debian Oval Importer Fixing VCID-jd5u-smut-1kga https://www.debian.org/security/oval/oval-definitions-jessie.xml.bz2 37.0.0
2025-08-01T09:51:19.864760+00:00 Debian Oval Importer Fixing VCID-79ef-qsqu-zfgd https://www.debian.org/security/oval/oval-definitions-jessie.xml.bz2 37.0.0