Approved changes feed: RSS · Atom

cpe:2.3:a:icu-project:international_components_for_unicode:63.1:*:*:*:*:c\/c\+\+:*:*

part: a version: 63.1 update: *

VendorIcu Project (8e9bfbef-4e94-5d8e-a292-84c9f0284061)
ProductInternational Components For Unicode (5697c445-9125-5de9-a990-3b459f9add8a)
Edition*
Language*
Software edition*
Target softwarec/c++
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/unicode-org/icu purl2cpe 2026-06-01 10:11:41.398485
pkg:rpm/fedora/icu purl2cpe 2026-06-01 10:11:41.398487
pkg:rpm/fedora/icu4j purl2cpe 2026-06-01 10:11:41.398488
pkg:rpm/opensuse/icu purl2cpe 2026-06-01 10:11:41.398490
pkg:rpm/opensuse/icu4j purl2cpe 2026-06-01 10:11:41.398491

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-18928 vulnerable 2026-06-08 05:11:14.969406 Details available
International Components for Unicode (ICU) for C/C++ 63.1 has an integer overflow in number::impl::DecimalQuantity::toScientificString() in i18n/number_decimalquantity.cpp.
Published: 2018-11-04T20:00:00.000Z
Updated: 2026-10-14T06:30:39.138Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.