Skip to content
OpenAdvisories
Unscored USN-2740-1 3 CVEs

icu vulnerabilities

Published Sep 16, 2015 · Updated Apr 22, 2026

Ecosystem: Ubuntu

Summary

Atte Kettunen discovered that ICU incorrectly handled certain converter
names. If an application using ICU processed crafted data, a remote
attacker could possibly cause it to crash. (CVE-2015-1270)

It was discovered that ICU incorrectly handled certain memory operations
when processing data. If an application using ICU processed crafted data,
a remote attacker could possibly cause it to crash or potentially execute
arbitrary code with the privileges of the user invoking the program.
(CVE-2015-2632, CVE-2015-4760)

Fixed packages 1

ReleasePackageFixed in
Ubuntu · 14.04 LTS 14.04:LTS icu 52.1-3ubuntu0.4

Vulnerabilities 3

References

  • report
    https://ubuntu.com/security/CVE-2015-1270
  • report
    https://ubuntu.com/security/CVE-2015-2632
  • report
    https://ubuntu.com/security/CVE-2015-4760