Approved changes feed: RSS · Atom

cpe:2.3:a:icu-project:international_components_for_unicode:*:*:*:*:*:c\/c\+\+:*:*

part: a version: * update: *

VendorIcu Project (8e9bfbef-4e94-5d8e-a292-84c9f0284061)
ProductInternational Components For Unicode (5697c445-9125-5de9-a990-3b459f9add8a)
Edition*
Language*
Software edition*
Target softwarec/c++
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-10531 vulnerable 2026-06-08 05:16:35.243995 Details available
An issue was discovered in International Components for Unicode (ICU) for C/C++ through 66.1. An integer overflow, leading to a heap-based buffer overflow, exists in the UnicodeString::doAppend() function in common/unistr.cpp.
Published: 2020-03-12T18:09:40.000Z
Updated: 2026-10-14T08:50:30.957Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-7868 vulnerable 2026-06-08 05:10:06.254766 Details available
International Components for Unicode (ICU) for C/C++ before 2017-02-13 has an out-of-bounds write caused by a heap-based buffer overflow related to the utf8TextAccess function in common/utext.cpp and the utext_moveIndex32* function.
Published: 2017-04-14T04:30:00.000Z
Updated: 2024-08-05T16:19:28.804Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-7867 vulnerable 2026-06-08 05:10:06.254254 Details available
International Components for Unicode (ICU) for C/C++ before 2017-02-13 has an out-of-bounds write caused by a heap-based buffer overflow related to the utf8TextAccess function in common/utext.cpp and the utext_setNativeIndex* function.
Published: 2017-04-14T04:30:00.000Z
Updated: 2024-08-05T16:19:29.320Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-17484 vulnerable 2026-06-08 05:09:09.487525 Details available
The ucnv_UTF8FromUTF8 function in ucnv_u8.cpp in International Components for Unicode (ICU) for C/C++ through 60.1 mishandles ucnv_convertEx calls for UTF-8 to UTF-8 conversion, which allows remote attackers to cause a denial of service (stack-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted string, as demonstrated by ZNC.
Published: 2017-12-10T20:00:00.000Z
Updated: 2024-08-05T20:51:31.622Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-15422 vulnerable 2026-06-08 05:08:58.853126 Details available
Integer overflow in international date handling in International Components for Unicode (ICU) for C/C++ before 60.1, as used in V8 in Google Chrome prior to 63.0.3239.84 and other products, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.
Published: 2018-08-28T19:00:00.000Z
Updated: 2026-10-14T06:30:24.107Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-15396 vulnerable 2026-06-08 05:08:58.832383 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-14952 vulnerable 2026-06-08 05:08:57.656344 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-7415 vulnerable 2026-06-08 05:08:12.333086 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6293 vulnerable 2026-06-08 05:07:59.372318 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-5922 vulnerable 2026-06-08 05:06:50.997321 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-9911 vulnerable 2026-06-08 05:06:13.149074 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-9654 vulnerable 2026-06-08 05:06:12.361729 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-8147 vulnerable 2026-06-08 05:06:08.132353 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-8146 vulnerable 2026-06-08 05:06:08.131596 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-7940 vulnerable 2026-06-08 05:06:00.464197 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-7926 vulnerable 2026-06-08 05:06:00.453552 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-7923 vulnerable 2026-06-08 05:06:00.447127 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-4599 vulnerable 2026-06-08 04:59:32.183026 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-4771 vulnerable 2026-06-08 04:49:57.199594 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-4770 vulnerable 2026-06-08 04:49:57.198646 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.