Icu-project

International Components For Unicode

4 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.8

CVE-2020-10531

  • EPSS 0.79%
  • Published 12.03.2020 19:15:13
  • Last modified 21.11.2024 04:55:31

An issue was discovered in International Components for Unicode (ICU) for C/C++ through 66.1. An integer overflow, leading to a heap-based buffer overflow, exists in the UnicodeString::doAppend() function in common/unistr.cpp.

9.8

CVE-2018-18928

  • EPSS 2.73%
  • Published 04.11.2018 20:29:00
  • Last modified 21.11.2024 03:56:53

International Components for Unicode (ICU) for C/C++ 63.1 has an integer overflow in number::impl::DecimalQuantity::toScientificString() in i18n/number_decimalquantity.cpp.

6.5

CVE-2017-15396

  • EPSS 1.79%
  • Published 28.08.2018 20:29:00
  • Last modified 21.11.2024 03:14:37

A stack buffer overflow in NumberingSystem in International Components for Unicode (ICU) for C/C++ before 60.2, as used in V8 in Google Chrome prior to 62.0.3202.75 and other products, allowed a remote attacker to potentially exploit heap corruption ...

6.5

CVE-2017-15422

  • EPSS 1.25%
  • Published 28.08.2018 19:29:11
  • Last modified 21.11.2024 03:14:40

Integer overflow in international date handling in International Components for Unicode (ICU) for C/C++ before 60.1, as used in V8 in Google Chrome prior to 63.0.3239.84 and other products, allowed a remote attacker to perform an out of bounds memory...