Vulnerabilidades de Unicode
CVEs publicadas que afetam produtos de Unicode: 2 registro(s), com severidade, exploração e correções.
CVE-2025-5222
Alta · 7.0
CWE-120 27/05/2025
Icu: stack buffer overflow in the srbroot::addtag function
A stack buffer overflow was found in Internationl components for unicode (ICU ). While running the genrb binary, the 'subtag' struct overflowed at the SRBRoot::addTag function. This issue may lead to memory corruption and local arbitrary code execution.
CVE-2020-21913
Média · 5.5
CWE-416 20/09/2021
International Components for Unicode (ICU-20850) v66.1 was discovered to contain a use after free...
International Components for Unicode (ICU-20850) v66.1 was discovered to contain a use after free bug in the pkg_createWithAssemblyCode function in the file tools/pkgdata/pkgdata.cpp.