Icu-project International Components For Unicode — known CVE vulnerabilities

Every CVE whose affected-product data names Icu-project International Components For Unicode, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (21)

• CVE-2015-5922 — CVSS 10.0 (critical): Unspecified vulnerability in International Components for Unicode (ICU) before 53.1.0, as used in Apple OS X before 10.11 and watchOS…
• CVE-2018-18928 — CVSS 9.8 (critical): International Components for Unicode (ICU) for C/C++ 63.1 has an integer overflow in number::impl::DecimalQuantity::toScientificString() in…
• CVE-2017-17484 — CVSS 9.8 (critical): The ucnv_UTF8FromUTF8 function in ucnv_u8.cpp in International Components for Unicode (ICU) for C/C++ through 60.1 mishandles…
• CVE-2017-14952 — CVSS 9.8 (critical): Double free in i18n/zonemeta.cpp in International Components for Unicode (ICU) for C/C++ through 59.1 allows remote attackers to execute…
• CVE-2016-7415 — CVSS 9.8 (critical): Stack-based buffer overflow in the Locale class in common/locid.cpp in International Components for Unicode (ICU) through 57.1 for C/C++…
• CVE-2016-6293 — CVSS 9.8 (critical): The uloc_acceptLanguageFromHTTP function in common/uloc.cpp in International Components for Unicode (ICU) through 57.1 for C/C++ does not…
• CVE-2014-9654 — CVSS 9.8 (critical): The Regular Expressions package in International Components for Unicode (ICU) for C/C++ before 2014-12-03, as used in Google Chrome before…
• CVE-2014-9911 — CVSS 9.8 (critical): Stack-based buffer overflow in the ures_getByKeyWithFallback function in common/uresbund.cpp in International Components for Unicode (ICU)…
• CVE-2007-4771 — CVSS 9.3 (critical): Heap-based buffer overflow in the doInterval function in regexcmp.cpp in libicu in International Components for Unicode (ICU) 3.8.1 and…
• CVE-2020-10531 — CVSS 8.8 (high): An issue was discovered in International Components for Unicode (ICU) for C/C++ through 66.1. An integer overflow, leading to a heap-based…
• CVE-2017-7868 — CVSS 7.5 (high): International Components for Unicode (ICU) for C/C++ before 2017-02-13 has an out-of-bounds write caused by a heap-based buffer overflow…
• CVE-2014-8146 — CVSS 7.5 (high): The resolveImplicitLevels function in common/ubidi.c in the Unicode Bidirectional Algorithm implementation in ICU4C in International…
• CVE-2014-7940 — CVSS 7.5 (high): The collator implementation in i18n/ucol.cpp in International Components for Unicode (ICU) 52 through SVN revision 293126, as used in…
• CVE-2014-7926 — CVSS 7.5 (high): The Regular Expressions package in International Components for Unicode (ICU) 52 before SVN revision 292944, as used in Google Chrome…
• CVE-2014-8147 — CVSS 7.5 (high): The resolveImplicitLevels function in common/ubidi.c in the Unicode Bidirectional Algorithm implementation in ICU4C in International…
• CVE-2011-4599 — CVSS 7.5 (high): Stack-based buffer overflow in the _canonicalize function in common/uloc.c in International Components for Unicode (ICU) before 49.1 allows…
• CVE-2014-7923 — CVSS 7.5 (high): The Regular Expressions package in International Components for Unicode (ICU) 52 before SVN revision 292944, as used in Google Chrome…
• CVE-2017-7867 — CVSS 7.5 (high): International Components for Unicode (ICU) for C/C++ before 2017-02-13 has an out-of-bounds write caused by a heap-based buffer overflow…
• CVE-2007-4770 — CVSS 6.8 (medium): libicu in International Components for Unicode (ICU) 3.8.1 and earlier attempts to process backreferences to the nonexistent capture group…
• CVE-2017-15422 — CVSS 6.5 (medium): Integer overflow in international date handling in International Components for Unicode (ICU) for C/C++ before 60.1, as used in V8 in…
• CVE-2017-15396 — CVSS 6.5 (medium): A stack buffer overflow in NumberingSystem in International Components for Unicode (ICU) for C/C++ before 60.2, as used in V8 in Google…