Skip to content

PatchFirst · Latest vulnerabilities

icu vulnerabilities

Vulnerabilities published for icu in the last 30 days: 0. Listed in the KEV catalogue: 0.

RSS ↗ JSON ↗

Vulnerabilities: 3

CVE-2025-5222
High · CVSS 7EPSS 0.44%No fix published
Icu: stack buffer overflow in the srbroot::addtag function
A stack buffer overflow was found in Internationl components for unicode (ICU ). While running the genrb binary, the 'subtag' struct overflowed at the SRBRoot::addTag function. This issue may lead to memory corruption and local arbitrary code execution.
icu Operating systems
Published May 27, 2025Updated October 21, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2020-21913
Medium · CVSS 5.5EPSS 1.21%Fix available
CVE-2020-21913
International Components for Unicode (ICU-20850) v66.1 was discovered to contain a use after free bug in the pkg_createWithAssemblyCode function in the file tools/pkgdata/pkgdata.cpp.
icu Operating systems
- Update to 60.2-3ubuntu3.2
Published September 20, 2021Updated October 14, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2020-10531
High · CVSS 8.8EPSS 2.67%Fix available
CVE-2020-10531
An issue was discovered in International Components for Unicode (ICU) for C/C++ through 66.1. An integer overflow, leading to a heap-based buffer overflow, exists in the UnicodeString::doAppend() function in common/unistr.cpp.
icu Operating systems
- Update to 60.2-3ubuntu3.1
Published March 12, 2020Updated October 14, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →