Skip to content

PatchFirst · Latest vulnerabilities

icu vulnerabilities

Vulnerabilities published for icu in the last 30 days: 0. Listed in the KEV catalogue: 0.

RSS ↗ JSON ↗

Vulnerabilities: 2

CVE-2025-5222
High · CVSS 7EPSS 0.44%No fix published
Icu: stack buffer overflow in the srbroot::addtag function
A stack buffer overflow was found in Internationl components for unicode (ICU ). While running the genrb binary, the 'subtag' struct overflowed at the SRBRoot::addTag function. This issue may lead to memory corruption and local arbitrary code execution.
icu Operating systems
Published May 27, 2025Updated October 21, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2020-21913
Medium · CVSS 5.5EPSS 1.21%Fix available
CVE-2020-21913
International Components for Unicode (ICU-20850) v66.1 was discovered to contain a use after free bug in the pkg_createWithAssemblyCode function in the file tools/pkgdata/pkgdata.cpp.
icu Operating systems
- Update to 55.1-7ubuntu0.5+esm1
Published September 20, 2021Updated October 14, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →