IC
Product
International Components For Unicode
21
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 7High 3Medium 2Low 0
Watch
Add International Components For Unicode to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-18928 | 9.8 | Nov 4 | International Components for Unicode (ICU) for C/C++ 63.1 has an integer overflow in number::impl::DecimalQuantity::toScientificString() in i18n/number_decimalquantity.cpp Affected: 63.1 |
| CVE-2017-17484 | 9.8 | Dec 10 | The ucnv_UTF8FromUTF8 function in ucnv_u8.cpp in International Components for Unicode (ICU) for C/C++ through 60.1 mishandles ucnv_convertEx calls for UTF-8 to UTF-8 conversion,… Affected: through 60.1 |
| CVE-2017-14952 | 9.8 | Oct 16 | Double free in i18n/zonemeta.cpp in International Components for Unicode (ICU) for C/C++ through 59.1 allows remote attackers to execute arbitrary code via a crafted string, aka a… Affected: through 59.1 |
| CVE-2014-9654 | 9.8 | Apr 24 | The Regular Expressions package in International Components for Unicode (ICU) for C/C++ before 2014-12-03, as used in Google Chrome before 40.0.2214.91, calculates certain values… Affected: before 55.1 |
| CVE-2014-9911 | 9.8 | Jan 4 | Stack-based buffer overflow in the ures_getByKeyWithFallback function in common/uresbund.cpp in International Components for Unicode (ICU) before 54.1 for C/C++ allows remote… Affected: before 54.1 |
| CVE-2016-7415 | 9.8 | Sep 17 | Stack-based buffer overflow in the Locale class in common/locid.cpp in International Components for Unicode (ICU) through 57.1 for C/C++ allows remote attackers to cause a denial… Affected: through 57.1 |
| CVE-2016-6293 | 9.8 | Jul 25 | The uloc_acceptLanguageFromHTTP function in common/uloc.cpp in International Components for Unicode (ICU) through 57.1 for C/C++ does not ensure that there is a '\0' character at… Affected: through 57.1 |
| CVE-2020-10531 | 8.8 | Mar 12 | An issue was discovered in International Components for Unicode (ICU) for C/C++ through 66.1 Affected: through 66.1 |
| CVE-2017-7868 | 7.5 | Apr 14 | International Components for Unicode (ICU) for C/C++ before 2017-02-13 has an out-of-bounds write caused by a heap-based buffer overflow related to the utf8TextAccess function in… Affected: through 58.2 |
| CVE-2017-7867 | 7.5 | Apr 14 | International Components for Unicode (ICU) for C/C++ before 2017-02-13 has an out-of-bounds write caused by a heap-based buffer overflow related to the utf8TextAccess function in… Affected: through 58.2 |
| CVE-2017-15396 | 6.5 | Aug 28 | A stack buffer overflow in NumberingSystem in International Components for Unicode (ICU) for C/C++ before 60.2, as used in V8 in Google Chrome prior to 62.0.3202.75 and other… Affected: before 60.2 |
| CVE-2017-15422 | 6.5 | Aug 28 | Integer overflow in international date handling in International Components for Unicode (ICU) for C/C++ before 60.1, as used in V8 in Google Chrome prior to 63.0.3239.84 and other… Affected: before 60.1 |
| CVE-2015-5922 | – | Oct 9 | Unspecified vulnerability in International Components for Unicode (ICU) before 53.1.0, as used in Apple OS X before 10.11 and watchOS before 2, has unknown impact and attack… Affected: before 53.1 |
| CVE-2014-8147 | – | May 25 | The resolveImplicitLevels function in common/ubidi.c in the Unicode Bidirectional Algorithm implementation in ICU4C in International Components for Unicode (ICU) before 55.1 uses… Affected: before 55.1 |
| CVE-2014-8146 | – | May 25 | The resolveImplicitLevels function in common/ubidi.c in the Unicode Bidirectional Algorithm implementation in ICU4C in International Components for Unicode (ICU) before 55.1 does… Affected: before 55.1 |
| CVE-2014-7940 | – | Jan 22 | The collator implementation in i18n/ucol.cpp in International Components for Unicode (ICU) 52 through SVN revision 293126, as used in Google Chrome before 40.0.2214.91, does not… Affected: through 52.1 |
| CVE-2014-7926 | – | Jan 22 | The Regular Expressions package in International Components for Unicode (ICU) 52 before SVN revision 292944, as used in Google Chrome before 40.0.2214.91, allows remote attackers… Affected: before 55.1 |
| CVE-2014-7923 | – | Jan 22 | The Regular Expressions package in International Components for Unicode (ICU) 52 before SVN revision 292944, as used in Google Chrome before 40.0.2214.91, allows remote attackers… Affected: before 55.1 |
| CVE-2011-4599 | – | Jun 21 | Stack-based buffer overflow in the _canonicalize function in common/uloc.c in International Components for Unicode (ICU) before 49.1 allows remote attackers to execute arbitrary… Affected: before 49.1 |
| CVE-2007-4771 | – | Jan 29 | Heap-based buffer overflow in the doInterval function in regexcmp.cpp in libicu in International Components for Unicode (ICU) 3.8.1 and earlier allows context-dependent attackers… Affected: through 3.8.1 |
| CVE-2007-4770 | – | Jan 29 | libicu in International Components for Unicode (ICU) 3.8.1 and earlier attempts to process backreferences to the nonexistent capture group zero (aka \0), which might allow… Affected: through 3.8.1 |
Showing 21