Unicode vulnerabilities
Published CVEs affecting Unicode products: 2 record(s), with severity, exploitation and fixes.
CVE-2025-5222
High · 7.0
CWE-120 May 27, 2025
Icu: stack buffer overflow in the srbroot::addtag function
A stack buffer overflow was found in Internationl components for unicode (ICU ). While running the genrb binary, the 'subtag' struct overflowed at the SRBRoot::addTag function. This issue may lead to memory corruption and local arbitrary code execution.
CVE-2020-21913
Medium · 5.5
CWE-416 Sep 20, 2021
International Components for Unicode (ICU-20850) v66.1 was discovered to contain a use after free...
International Components for Unicode (ICU-20850) v66.1 was discovered to contain a use after free bug in the pkg_createWithAssemblyCode function in the file tools/pkgdata/pkgdata.cpp.