High severity7.0NVD Advisory· Published May 27, 2025· Updated Apr 23, 2026
CVE-2025-5222
CVE-2025-5222
Description
A stack buffer overflow was found in Internationl components for unicode (ICU ). While running the genrb binary, the 'subtag' struct overflowed at the SRBRoot::addTag function. This issue may lead to memory corruption and local arbitrary code execution.
Affected products
1- cpe:2.3:a:unicode:international_components_for_unicode:*:*:*:*:*:*:*:*Range: <77.1
Patches
1457157a92aa0Vulnerability mechanics
Generated by null/stub on May 9, 2026. Inputs: CWE entries + fix-commit diffs from this CVE's patches. Citations validated against bundle.
References
9- access.redhat.com/errata/RHSA-2025:11888nvdVendor Advisory
- access.redhat.com/errata/RHSA-2025:12083nvdVendor Advisory
- access.redhat.com/errata/RHSA-2025:12331nvdVendor Advisory
- access.redhat.com/errata/RHSA-2025:12332nvdVendor Advisory
- access.redhat.com/errata/RHSA-2025:12333nvdVendor Advisory
- access.redhat.com/security/cve/CVE-2025-5222nvdVendor Advisory
- bugzilla.redhat.com/show_bug.cginvdIssue Tracking
- lists.debian.org/debian-lts-announce/2025/06/msg00015.htmlnvdMailing List
- unicode-org.atlassian.net/jira/software/c/projects/ICU/issues/ICU-22957nvd
News mentions
0No linked articles in our index yet.