rpm package
suse/icu&distro=SUSE Linux Enterprise Server 15 SP5-LTSS
pkg:rpm/suse/icu&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP5-LTSS
Vulnerabilities (2)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2025-5222 | Hig | 7.0 | < 65.1-150200.4.15.1 | 65.1-150200.4.15.1 | May 27, 2025 | A stack buffer overflow was found in Internationl components for unicode (ICU ). While running the genrb binary, the 'subtag' struct overflowed at the SRBRoot::addTag function. This issue may lead to memory corruption and local arbitrary code execution. | |
| CVE-2020-21913 | — | < 65.1-150200.4.15.1 | 65.1-150200.4.15.1 | Sep 20, 2021 | International Components for Unicode (ICU-20850) v66.1 was discovered to contain a use after free bug in the pkg_createWithAssemblyCode function in the file tools/pkgdata/pkgdata.cpp. |
- affected < 65.1-150200.4.15.1fixed 65.1-150200.4.15.1
A stack buffer overflow was found in Internationl components for unicode (ICU ). While running the genrb binary, the 'subtag' struct overflowed at the SRBRoot::addTag function. This issue may lead to memory corruption and local arbitrary code execution.
- CVE-2020-21913Sep 20, 2021affected < 65.1-150200.4.15.1fixed 65.1-150200.4.15.1
International Components for Unicode (ICU-20850) v66.1 was discovered to contain a use after free bug in the pkg_createWithAssemblyCode function in the file tools/pkgdata/pkgdata.cpp.