Icu-project vulnerabilities
Published CVEs affecting Icu-project products: 3 record(s), with severity, exploitation and fixes.
CVE-2020-10531
High · 8.8
CWE-190 Mar 12, 2020
An issue was discovered in International Components for Unicode (ICU) for C/C++ through 66.1. An...
An issue was discovered in International Components for Unicode (ICU) for C/C++ through 66.1. An integer overflow, leading to a heap-based buffer overflow, exists in the UnicodeString::doAppend() function in common/unistr.cpp.
CVE-2018-18928
Critical · 9.8
CWE-190 Nov 4, 2018
International Components for Unicode (ICU) for C/C++ 63.1 has an integer overflow in number::impl...
International Components for Unicode (ICU) for C/C++ 63.1 has an integer overflow in number::impl::DecimalQuantity::toScientificString() in i18n/number_decimalquantity.cpp.
CVE-2017-15422
Medium · 6.5
CWE-190 Aug 28, 2018
Integer overflow in international date handling in International Components for Unicode (ICU) for...
Integer overflow in international date handling in International Components for Unicode (ICU) for C/C++ before 60.1, as used in V8 in Google Chrome prior to 63.0.3239.84 and other products, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.