Search for packages
| purl | pkg:deb/debian/icu@63.1-6%2Bdeb10u3 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-8axv-ehyu-zqav
Aliases: CVE-2020-10531 |
An issue was discovered in International Components for Unicode (ICU) for C/C++ through 66.1. An integer overflow, leading to a heap-based buffer overflow, exists in the UnicodeString::doAppend() function in common/unistr.cpp. |
Affected by 1 other vulnerability. |
|
VCID-saxq-p7en-gyet
Aliases: CVE-2025-5222 |
A stack buffer overflow was found in Internationl components for unicode (ICU ). While running the genrb binary, the 'subtag' struct overflowed at the SRBRoot::addTag function. This issue may lead to memory corruption and local arbitrary code execution. |
Affected by 0 other vulnerabilities. |
|
VCID-ywmu-5nne-1qdj
Aliases: CVE-2020-21913 |
International Components for Unicode (ICU-20850) v66.1 was discovered to contain a use after free bug in the pkg_createWithAssemblyCode function in the file tools/pkgdata/pkgdata.cpp. |
Affected by 1 other vulnerability. |
|
VCID-yxtk-z76x-9qc2
Aliases: CVE-2021-30535 |
Double free in ICU in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
Affected by 1 other vulnerability. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-7uxp-cx7j-9ka3 | Integer overflow in international date handling in International Components for Unicode (ICU) for C/C++ before 60.1, as used in V8 in Google Chrome prior to 63.0.3239.84 and other products, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. |
CVE-2017-15422
|
| VCID-8axv-ehyu-zqav | An issue was discovered in International Components for Unicode (ICU) for C/C++ through 66.1. An integer overflow, leading to a heap-based buffer overflow, exists in the UnicodeString::doAppend() function in common/unistr.cpp. |
CVE-2020-10531
|
| VCID-vu9x-gy3f-fkes |
CVE-2017-14952
|
|
| VCID-xvtf-unp2-xudm | International Components for Unicode (ICU) for C/C++ 63.1 has an integer overflow in number::impl::DecimalQuantity::toScientificString() in i18n/number_decimalquantity.cpp. |
CVE-2018-18928
|
| VCID-ywmu-5nne-1qdj | International Components for Unicode (ICU-20850) v66.1 was discovered to contain a use after free bug in the pkg_createWithAssemblyCode function in the file tools/pkgdata/pkgdata.cpp. |
CVE-2020-21913
|