Package · Debian

icu

36 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

36 results · Feed

High 7.0

CVE-2025-5222 Public exploit

Icu: stack buffer overflow in the srbroot::addtag function

A stack buffer overflow was found in Internationl components for unicode (ICU ). While running the genrb binary, the 'subtag' struct overflowed at the SRBRoot::addTag function. This issue may lead to memory corruption and local arbitrary code execution.

Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Alpine

May 27, 2025
Unscored —

CVE-2020-21913

International Components for Unicode (ICU-20850) v66.1 was discovered to contain a use after free bug in the pkg_create…

icu icu icu Debian Ubuntu Alpine

Sep 20, 2021
Unscored —

CVE-2021-30535 Public exploit

Double free in ICU in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to potentially exploit heap corrupt…

Google Chrome chromium chromium-browser Browsers Debian Ubuntu Alpine

Jun 7, 2021
Unscored —

CVE-2020-10531

An issue was discovered in International Components for Unicode (ICU) for C/C++ through 66.1. An integer overflow, lead…

chromium-browser icu icu icu Debian Ubuntu Alpine

Mar 12, 2020
Unscored —

CVE-2018-18928

International Components for Unicode (ICU) for C/C++ 63.1 has an integer overflow in number::impl::DecimalQuantity::toS…

icu Debian

Nov 4, 2018
Unscored —

CVE-2017-15422

Integer overflow in international date handling in International Components for Unicode (ICU) for C/C++ before 60.1, as…

chromium-browser oxide-qt icu icu Browsers Debian Ubuntu

Aug 28, 2018
Unscored —

CVE-2017-14952

Double free in i18n/zonemeta.cpp in International Components for Unicode (ICU) for C/C++ through 59.1 allows remote att…

icu icu Debian Ubuntu

Oct 16, 2017
Unscored —

CVE-2014-9654

The Regular Expressions package in International Components for Unicode (ICU) for C/C++ before 2014-12-03, as used in G…

icu icu Debian Ubuntu

Apr 24, 2017
Unscored —

CVE-2017-7867

International Components for Unicode (ICU) for C/C++ before 2017-02-13 has an out-of-bounds write caused by a heap-base…

icu icu icu Debian Ubuntu Alpine

Apr 14, 2017
Unscored —

CVE-2017-7868

International Components for Unicode (ICU) for C/C++ before 2017-02-13 has an out-of-bounds write caused by a heap-base…

icu icu icu Debian Ubuntu Alpine

Apr 14, 2017
Unscored —

CVE-2014-9911

Stack-based buffer overflow in the ures_getByKeyWithFallback function in common/uresbund.cpp in International Component…

android icu icu mozjs24 Debian Ubuntu

Jan 4, 2017
Unscored —

CVE-2016-7415

Stack-based buffer overflow in the Locale class in common/locid.cpp in International Components for Unicode (ICU) throu…

icu icu icu Debian Ubuntu Alpine

Sep 17, 2016
Unscored —

CVE-2016-6293

The uloc_acceptLanguageFromHTTP function in common/uloc.cpp in International Components for Unicode (ICU) through 57.1 …

icu icu icu Debian Ubuntu Alpine

Jul 25, 2016
Unscored —

CVE-2016-0494

Unspecified vulnerability in the Java SE and Java SE Embedded components in Oracle Java SE 6u105, 7u91, and 8u66 and Ja…

openjdk-7 openjdk-6 icu icu Debian Ubuntu

Jan 21, 2016
Unscored —

CVE-2015-4844

Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers t…

openjdk-7 openjdk-6 icu icu Debian Ubuntu

Oct 21, 2015
Unscored —

CVE-2015-1270

The ucnv_io_getConverterName function in common/ucnv_io.cpp in International Components for Unicode (ICU), as used in G…

chromium-browser oxide-qt icu icu Debian Ubuntu

Jul 23, 2015
Unscored —

CVE-2015-4760

Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45 allows remote attackers to affect confidentiality, int…

openjdk-7 openjdk-6 icu icu Debian Ubuntu

Jul 16, 2015
Unscored —

CVE-2015-2632

Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45 allows remote attackers to affect confidentiality via …

openjdk-7 openjdk-6 icu icu Debian Ubuntu

Jul 16, 2015
Unscored —

CVE-2014-8146 Public exploit EPSS 25%

The resolveImplicitLevels function in common/ubidi.c in the Unicode Bidirectional Algorithm implementation in ICU4C in …

icu icu Debian Ubuntu

May 25, 2015
Unscored —

CVE-2014-8147 Public exploit EPSS 24%

The resolveImplicitLevels function in common/ubidi.c in the Unicode Bidirectional Algorithm implementation in ICU4C in …

icu icu Debian Ubuntu

May 25, 2015
Unscored —

CVE-2014-7926

The Regular Expressions package in International Components for Unicode (ICU) 52 before SVN revision 292944, as used in…

chromium-browser oxide-qt icu icu Debian Ubuntu

Jan 22, 2015
Unscored —

CVE-2014-7923

The Regular Expressions package in International Components for Unicode (ICU) 52 before SVN revision 292944, as used in…

chromium-browser oxide-qt icu icu Debian Ubuntu

Jan 22, 2015
Unscored —

CVE-2014-7940

The collator implementation in i18n/ucol.cpp in International Components for Unicode (ICU) 52 through SVN revision 2931…

chromium-browser oxide-qt icu icu Debian Ubuntu

Jan 22, 2015
Unscored —

CVE-2014-6585

Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers to affect confidential…

openjdk-7 openjdk-6 icu icu Debian Ubuntu

Jan 21, 2015
Unscored —

CVE-2014-6591

Unspecified vulnerability in the Java SE component in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attacke…

openjdk-7 openjdk-6 icu icu Debian Ubuntu

Jan 21, 2015
Unscored —

CVE-2013-2924

Use-after-free vulnerability in International Components for Unicode (ICU), as used in Google Chrome before 30.0.1599.6…

icu Debian

Oct 2, 2013
Unscored —

CVE-2013-1569

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 …

icu Debian

Apr 17, 2013
Unscored —

CVE-2013-2419 Public exploit EPSS 23%

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 …

icu Debian

Apr 17, 2013
Unscored —

CVE-2013-2383

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 …

icu Debian

Apr 17, 2013
Unscored —

CVE-2013-2384

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 …

icu Debian

Apr 17, 2013
Unscored —

CVE-2013-0900

Race condition in the International Components for Unicode (ICU) functionality in Google Chrome before 25.0.1364.97 on …

icu Debian

Feb 23, 2013
Unscored —

CVE-2011-4599

Stack-based buffer overflow in the _canonicalize function in common/uloc.c in International Components for Unicode (ICU…

icu Debian

Jun 21, 2012
Unscored —

CVE-2009-0153

International Components for Unicode (ICU) 4.0, 3.6, and other 3.x versions, as used in Apple Mac OS X 10.5 before 10.5…

icu Debian

May 13, 2009
Unscored —

CVE-2008-1036

The International Components for Unicode (ICU) library in Apple Mac OS X before 10.5.3, Red Hat Enterprise Linux 5, and…

icu Debian

Jun 2, 2008
Unscored —

CVE-2007-4771

Heap-based buffer overflow in the doInterval function in regexcmp.cpp in libicu in International Components for Unicode…

icu Debian

Jan 28, 2008
Unscored —

CVE-2007-4770

libicu in International Components for Unicode (ICU) 3.8.1 and earlier attempts to process backreferences to the nonexi…

icu Debian

Jan 28, 2008