Vulnerabilidades de Icu-project
CVEs publicadas que afetam produtos de Icu-project: 3 registro(s), com severidade, exploração e correções.
CVE-2020-10531
Alta · 8.8
CWE-190 12/03/2020
An issue was discovered in International Components for Unicode (ICU) for C/C++ through 66.1. An...
An issue was discovered in International Components for Unicode (ICU) for C/C++ through 66.1. An integer overflow, leading to a heap-based buffer overflow, exists in the UnicodeString::doAppend() function in common/unistr.cpp.
CVE-2018-18928
Crítica · 9.8
CWE-190 04/11/2018
International Components for Unicode (ICU) for C/C++ 63.1 has an integer overflow in number::impl...
International Components for Unicode (ICU) for C/C++ 63.1 has an integer overflow in number::impl::DecimalQuantity::toScientificString() in i18n/number_decimalquantity.cpp.
CVE-2017-15422
Média · 6.5
CWE-190 28/08/2018
Integer overflow in international date handling in International Components for Unicode (ICU) for...
Integer overflow in international date handling in International Components for Unicode (ICU) for C/C++ before 60.1, as used in V8 in Google Chrome prior to 63.0.3239.84 and other products, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.