Vulnerability index

Browse CVEs

9 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

International Components For Unicode CRITICAL 9.8
CVE-2018-18928

International Components for Unicode (ICU) for C/C++ 63.1 has an integer overflow in number::impl::DecimalQuantity::toScientificString() in i18n/numb…

Patch available
Fix from $2,300 2018-11-04
International Components For Unicode CRITICAL 9.8
CVE-2017-17484

The ucnv_UTF8FromUTF8 function in ucnv_u8.cpp in International Components for Unicode (ICU) for C/C++ through 60.1 mishandles ucnv_convertEx calls fo…

Fix: after 60.1
Fix from $2,300 2017-12-10
International Components For Unicode CRITICAL 9.8
CVE-2017-14952EPSS 5%

Double free in i18n/zonemeta.cpp in International Components for Unicode (ICU) for C/C++ through 59.1 allows remote attackers to execute arbitrary co…

Fix: after 59.1
Fix from $2,300 2017-10-16
International Components For Unicode CRITICAL 9.8
CVE-2014-9911EPSS 5%

Stack-based buffer overflow in the ures_getByKeyWithFallback function in common/uresbund.cpp in International Components for Unicode (ICU) before 54.…

Fix: 54.1+
Fix from $2,300 2017-01-04
International Components For Unicode CRITICAL 9.8
CVE-2016-7415EPSS 6%

Stack-based buffer overflow in the Locale class in common/locid.cpp in International Components for Unicode (ICU) through 57.1 for C/C++ allows remot…

Fix: after 57.1
Fix from $2,300 2016-09-17
International Components For Unicode CRITICAL 9.8
CVE-2016-6293

The uloc_acceptLanguageFromHTTP function in common/uloc.cpp in International Components for Unicode (ICU) through 57.1 for C/C++ does not ensure that…

Fix: after 57.1
Fix from $2,300 2016-07-25
International Components For Unicode HIGH 7.5
CVE-2011-4599EPSS 8%

Stack-based buffer overflow in the _canonicalize function in common/uloc.c in International Components for Unicode (ICU) before 49.1 allows remote at…

Fix: 49.1+
Fix from $1,950 2012-06-21
International Components For Unicode HIGH 9.3
CVE-2007-4771

Heap-based buffer overflow in the doInterval function in regexcmp.cpp in libicu in International Components for Unicode (ICU) 3.8.1 and earlier allow…

Fix: after 3.8.1
Fix from $1,950 2008-01-29
International Components For Unicode MEDIUM 6.8
CVE-2007-4770

libicu in International Components for Unicode (ICU) 3.8.1 and earlier attempts to process backreferences to the nonexistent capture group zero (aka …

Fix: after 3.8.1
Fix from $1,600 2008-01-29