rpm package
suse/icu&distro=SUSE Linux Enterprise Server 15 SP3-LTSS
pkg:rpm/suse/icu&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP3-LTSS
Vulnerabilities (3)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2025-5222 | Hig | 7.0 | < 65.1-150200.4.15.1 | 65.1-150200.4.15.1 | May 27, 2025 | A stack buffer overflow was found in Internationl components for unicode (ICU ). While running the genrb binary, the 'subtag' struct overflowed at the SRBRoot::addTag function. This issue may lead to memory corruption and local arbitrary code execution. | |
| CVE-2020-21913 | — | < 65.1-150200.4.15.1 | 65.1-150200.4.15.1 | Sep 20, 2021 | International Components for Unicode (ICU-20850) v66.1 was discovered to contain a use after free bug in the pkg_createWithAssemblyCode function in the file tools/pkgdata/pkgdata.cpp. | ||
| CVE-2020-10531 | — | < 60.2-150000.3.15.4 | 60.2-150000.3.15.4 | Mar 12, 2020 | An issue was discovered in International Components for Unicode (ICU) for C/C++ through 66.1. An integer overflow, leading to a heap-based buffer overflow, exists in the UnicodeString::doAppend() function in common/unistr.cpp. |
- affected < 65.1-150200.4.15.1fixed 65.1-150200.4.15.1
A stack buffer overflow was found in Internationl components for unicode (ICU ). While running the genrb binary, the 'subtag' struct overflowed at the SRBRoot::addTag function. This issue may lead to memory corruption and local arbitrary code execution.
- CVE-2020-21913Sep 20, 2021affected < 65.1-150200.4.15.1fixed 65.1-150200.4.15.1
International Components for Unicode (ICU-20850) v66.1 was discovered to contain a use after free bug in the pkg_createWithAssemblyCode function in the file tools/pkgdata/pkgdata.cpp.
- CVE-2020-10531Mar 12, 2020affected < 60.2-150000.3.15.4fixed 60.2-150000.3.15.4
An issue was discovered in International Components for Unicode (ICU) for C/C++ through 66.1. An integer overflow, leading to a heap-based buffer overflow, exists in the UnicodeString::doAppend() function in common/unistr.cpp.