Search for packages
Package details: pkg:deb/debian/icu@63.1-6%2Bdeb10u3
purl pkg:deb/debian/icu@63.1-6%2Bdeb10u3
Next non-vulnerable version 72.1-6
Latest non-vulnerable version 72.1-6
Risk 4.0
Vulnerabilities affecting this package (3)
Vulnerability Summary Fixed by
VCID-gbtj-ughp-aaaq
Aliases:
CVE-2021-30535
Double free in ICU in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
67.1-7
Affected by 1 other vulnerability.
VCID-s2x7-ae8b-aaac
Aliases:
CVE-2020-21913
International Components for Unicode (ICU-20850) v66.1 was discovered to contain a use after free bug in the pkg_createWithAssemblyCode function in the file tools/pkgdata/pkgdata.cpp.
67.1-7
Affected by 1 other vulnerability.
VCID-vwsr-9y7x-aaac
Aliases:
CVE-2020-10531
An issue was discovered in International Components for Unicode (ICU) for C/C++ through 66.1. An integer overflow, leading to a heap-based buffer overflow, exists in the UnicodeString::doAppend() function in common/unistr.cpp.
67.1-7
Affected by 1 other vulnerability.
Vulnerabilities fixed by this package (5)
Vulnerability Summary Aliases
VCID-6p8y-j7ur-aaan Double free in i18n/zonemeta.cpp in International Components for Unicode (ICU) for C/C++ through 59.1 allows remote attackers to execute arbitrary code via a crafted string, aka a "redundant UVector entry clean up function call" issue. CVE-2017-14952
VCID-aqx6-vg16-aaar International Components for Unicode (ICU) for C/C++ 63.1 has an integer overflow in number::impl::DecimalQuantity::toScientificString() in i18n/number_decimalquantity.cpp. CVE-2018-18928
VCID-s2x7-ae8b-aaac International Components for Unicode (ICU-20850) v66.1 was discovered to contain a use after free bug in the pkg_createWithAssemblyCode function in the file tools/pkgdata/pkgdata.cpp. CVE-2020-21913
VCID-vwsr-9y7x-aaac An issue was discovered in International Components for Unicode (ICU) for C/C++ through 66.1. An integer overflow, leading to a heap-based buffer overflow, exists in the UnicodeString::doAppend() function in common/unistr.cpp. CVE-2020-10531
VCID-xtqj-7q8m-aaaq Integer overflow in international date handling in International Components for Unicode (ICU) for C/C++ before 60.1, as used in V8 in Google Chrome prior to 63.0.3239.84 and other products, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. CVE-2017-15422

Date Actor Action Vulnerability Source VulnerableCode Version
2025-06-21T19:18:51.770852+00:00 Debian Oval Importer Affected by VCID-vwsr-9y7x-aaac https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.1.3
2025-06-21T18:58:38.000437+00:00 Debian Oval Importer Fixing VCID-xtqj-7q8m-aaaq https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.1.3
2025-06-21T16:34:25.957185+00:00 Debian Oval Importer Fixing VCID-vwsr-9y7x-aaac https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.3
2025-06-21T16:27:22.201956+00:00 Debian Oval Importer Fixing VCID-6p8y-j7ur-aaan https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.3
2025-06-21T15:26:50.433318+00:00 Debian Oval Importer Fixing VCID-s2x7-ae8b-aaac https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.3
2025-06-21T13:22:09.302254+00:00 Debian Oval Importer Fixing VCID-xtqj-7q8m-aaaq https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.3
2025-06-21T12:05:23.373048+00:00 Debian Oval Importer Fixing VCID-aqx6-vg16-aaar https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.3
2025-06-21T04:17:34.014307+00:00 Debian Oval Importer Affected by VCID-s2x7-ae8b-aaac None 36.1.3
2025-06-21T03:19:21.801344+00:00 Debian Oval Importer Affected by VCID-gbtj-ughp-aaaq None 36.1.3
2025-06-21T02:08:35.164848+00:00 Debian Oval Importer Affected by VCID-vwsr-9y7x-aaac None 36.1.3
2025-06-20T22:53:02.804583+00:00 Debian Oval Importer Fixing VCID-xtqj-7q8m-aaaq None 36.1.3
2025-06-20T22:39:52.363025+00:00 Debian Oval Importer Fixing VCID-6p8y-j7ur-aaan None 36.1.3
2025-06-20T22:18:54.331365+00:00 Debian Oval Importer Fixing VCID-aqx6-vg16-aaar None 36.1.3
2025-06-20T20:37:14.600657+00:00 Debian Oval Importer Fixing VCID-vwsr-9y7x-aaac None 36.1.3
2025-06-20T20:25:05.073636+00:00 Debian Oval Importer Fixing VCID-s2x7-ae8b-aaac None 36.1.3
2025-06-08T12:36:29.950997+00:00 Debian Oval Importer Fixing VCID-aqx6-vg16-aaar https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.1.0
2025-06-08T11:47:37.151181+00:00 Debian Oval Importer Affected by VCID-vwsr-9y7x-aaac https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.1.0
2025-06-08T11:28:00.552394+00:00 Debian Oval Importer Fixing VCID-xtqj-7q8m-aaaq https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.1.0
2025-06-08T09:20:08.020645+00:00 Debian Oval Importer Fixing VCID-vwsr-9y7x-aaac https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.0
2025-06-08T09:13:17.589704+00:00 Debian Oval Importer Fixing VCID-6p8y-j7ur-aaan https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.0
2025-06-08T08:21:24.638665+00:00 Debian Oval Importer Fixing VCID-s2x7-ae8b-aaac https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.0
2025-06-08T06:16:41.060813+00:00 Debian Oval Importer Fixing VCID-xtqj-7q8m-aaaq https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.0
2025-06-08T05:13:00.393455+00:00 Debian Oval Importer Fixing VCID-aqx6-vg16-aaar https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.0
2025-06-07T21:53:28.052740+00:00 Debian Oval Importer Affected by VCID-s2x7-ae8b-aaac None 36.1.0
2025-06-07T20:52:23.618825+00:00 Debian Oval Importer Affected by VCID-gbtj-ughp-aaaq None 36.1.0
2025-06-07T19:32:18.448923+00:00 Debian Oval Importer Affected by VCID-vwsr-9y7x-aaac None 36.1.0
2025-06-07T16:16:22.696051+00:00 Debian Oval Importer Fixing VCID-xtqj-7q8m-aaaq None 36.1.0
2025-06-07T16:03:48.610385+00:00 Debian Oval Importer Fixing VCID-6p8y-j7ur-aaan None 36.1.0
2025-06-07T15:43:01.959699+00:00 Debian Oval Importer Fixing VCID-aqx6-vg16-aaar None 36.1.0
2025-06-07T14:09:49.886793+00:00 Debian Oval Importer Fixing VCID-vwsr-9y7x-aaac None 36.1.0
2025-06-07T14:00:30.161138+00:00 Debian Oval Importer Fixing VCID-s2x7-ae8b-aaac None 36.1.0
2025-04-12T22:38:25.245059+00:00 Debian Oval Importer Fixing VCID-6p8y-j7ur-aaan https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.0.0
2025-04-12T21:11:36.833117+00:00 Debian Oval Importer Affected by VCID-gbtj-ughp-aaaq https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.0.0
2025-04-12T21:02:44.838201+00:00 Debian Oval Importer Affected by VCID-s2x7-ae8b-aaac https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.0.0
2025-04-12T18:23:03.916897+00:00 Debian Oval Importer Fixing VCID-aqx6-vg16-aaar https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.0.0
2025-04-12T17:32:34.106272+00:00 Debian Oval Importer Affected by VCID-vwsr-9y7x-aaac https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.0.0
2025-04-12T17:12:12.525246+00:00 Debian Oval Importer Fixing VCID-xtqj-7q8m-aaaq https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.0.0
2025-04-08T07:52:19.273182+00:00 Debian Oval Importer Fixing VCID-vwsr-9y7x-aaac https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.0.0
2025-04-08T07:45:13.758209+00:00 Debian Oval Importer Fixing VCID-6p8y-j7ur-aaan https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.0.0
2025-04-08T06:52:43.988193+00:00 Debian Oval Importer Fixing VCID-s2x7-ae8b-aaac https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.0.0
2025-04-08T04:48:55.575091+00:00 Debian Oval Importer Fixing VCID-xtqj-7q8m-aaaq https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.0.0
2025-04-08T03:43:58.654291+00:00 Debian Oval Importer Fixing VCID-aqx6-vg16-aaar https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.0.0
2025-04-07T20:23:53.839415+00:00 Debian Oval Importer Affected by VCID-s2x7-ae8b-aaac None 36.0.0
2025-04-07T19:22:57.233500+00:00 Debian Oval Importer Affected by VCID-gbtj-ughp-aaaq None 36.0.0
2025-04-07T18:09:59.185615+00:00 Debian Oval Importer Affected by VCID-vwsr-9y7x-aaac None 36.0.0
2025-04-07T14:47:53.784145+00:00 Debian Oval Importer Fixing VCID-xtqj-7q8m-aaaq None 36.0.0
2025-04-07T14:34:58.701757+00:00 Debian Oval Importer Fixing VCID-6p8y-j7ur-aaan None 36.0.0
2025-04-07T14:13:49.169681+00:00 Debian Oval Importer Fixing VCID-aqx6-vg16-aaar None 36.0.0
2025-04-07T12:43:13.918526+00:00 Debian Oval Importer Fixing VCID-vwsr-9y7x-aaac None 36.0.0
2025-04-07T12:34:50.374110+00:00 Debian Oval Importer Fixing VCID-s2x7-ae8b-aaac None 36.0.0