International Components For Unicode vulnerabilities

Product

International Components For Unicode

by Unicode · last CVE May 27, 2025

CVEs

On KEV

7.0

Max CVSS

New 30D

Severity mix

Critical 0High 1Medium 1Low 0

Severity

Exploitation

Watch

Add International Components For Unicode to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2025-5222	7.0	0%	May 27	Icu: stack buffer overflow in the srbroot::addtag function Affected: before 77.1
CVE-2020-21913	5.5	1%	Sep 20	International Components for Unicode (ICU-20850) v66.1 was discovered to contain a use after free bug in the pkg_createWithAssemblyCode function in the file… Affected: before 66.1