International Components For Unicode
Approved changes feed: RSS · Atom
cpe:2.3:a:unicode:international_components_for_unicode:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Unicode (61e11415-db96-5c5f-927e-51f582df103e) |
|---|---|
| Product | International Components For Unicode (a1eafb5e-b779-59f8-a862-872e521a8404) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/icu |
purl2cpe | 2026-06-01 10:11:39.887616 |
pkg:deb/ubuntu/icu |
purl2cpe | 2026-06-01 10:11:39.887619 |
pkg:github/unicode-org/icu |
purl2cpe | 2026-06-01 10:11:39.887622 |
pkg:gitlab/omnibus-mirror/libicu |
purl2cpe | 2026-06-01 10:11:39.887625 |
pkg:maven/com.ibm.icu/icu4j |
purl2cpe | 2026-06-01 10:11:39.887627 |
pkg:rpm/centos/icu |
purl2cpe | 2026-06-01 10:11:39.887630 |
pkg:rpm/fedora/icu |
purl2cpe | 2026-06-01 10:11:39.887633 |
pkg:rpm/opensuse/icu |
purl2cpe | 2026-06-01 10:11:39.887635 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-5222 |
vulnerable | 2026-06-08 07:35:24.425660 |
Icu: stack buffer overflow in the srbroot::addtag function
HIGH (7)
A stack buffer overflow was found in Internationl components for unicode (ICU ). While running the genrb binary, the 'subtag' struct overflowed at the SRBRoot::addTag function. This issue may lead to memory corruption and local arbitrary code execution.
Published: 2025-05-27T20:51:50.958Z
Updated: 2026-09-03T14:24:56.728Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-21913 |
vulnerable | 2026-06-08 05:22:31.105734 |
Details available
International Components for Unicode (ICU-20850) v66.1 was discovered to contain a use after free bug in the pkg_createWithAssemblyCode function in the file tools/pkgdata/pkgdata.cpp.
Published: 2021-09-20T13:55:28.000Z
Updated: 2024-08-04T14:30:33.640Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.