Browse CVEs

CRITICAL 9.8 CVE-2018-18928 International Components for Unicode (ICU) for C/C++ 63.1 has an integer overflow in number::impl::DecimalQuantity::toScientificString() in i18n/numb… International Components For Unicode Patch available Fix from $2,3002018-11-04 CRITICAL 9.8 CVE-2017-17484 The ucnv_UTF8FromUTF8 function in ucnv_u8.cpp in International Components for Unicode (ICU) for C/C++ through 60.1 mishandles ucnv_convertEx calls fo… International Components For Unicode after 60.1 Fix from $2,3002017-12-10 CRITICAL 9.8 CVE-2017-14952EPSS 5% Double free in i18n/zonemeta.cpp in International Components for Unicode (ICU) for C/C++ through 59.1 allows remote attackers to execute arbitrary co… International Components For Unicode after 59.1 Fix from $2,3002017-10-16 CRITICAL 9.8 CVE-2014-9911EPSS 5% Stack-based buffer overflow in the ures_getByKeyWithFallback function in common/uresbund.cpp in International Components for Unicode (ICU) before 54.… International Components For Unicode 54.1+ Fix from $2,3002017-01-04 CRITICAL 9.8 CVE-2016-7415EPSS 6% Stack-based buffer overflow in the Locale class in common/locid.cpp in International Components for Unicode (ICU) through 57.1 for C/C++ allows remot… International Components For Unicode after 57.1 Fix from $2,3002016-09-17 CRITICAL 9.8 CVE-2016-6293 The uloc_acceptLanguageFromHTTP function in common/uloc.cpp in International Components for Unicode (ICU) through 57.1 for C/C++ does not ensure that… International Components For Unicode after 57.1 Fix from $2,3002016-07-25 HIGH 7.5 CVE-2011-4599EPSS 8% Stack-based buffer overflow in the _canonicalize function in common/uloc.c in International Components for Unicode (ICU) before 49.1 allows remote at… International Components For Unicode 49.1+ Fix from $1,9502012-06-21 HIGH 9.3 CVE-2007-4771 Heap-based buffer overflow in the doInterval function in regexcmp.cpp in libicu in International Components for Unicode (ICU) 3.8.1 and earlier allow… International Components For Unicode after 3.8.1 Fix from $1,9502008-01-29 MEDIUM 6.8 CVE-2007-4770 libicu in International Components for Unicode (ICU) 3.8.1 and earlier attempts to process backreferences to the nonexistent capture group zero (aka … International Components For Unicode after 3.8.1 Fix from $1,6002008-01-29