תיאור (מקור, אנגלית)
An issue was discovered in International Components for Unicode (ICU) for C/C++ through 66.1. An integer overflow, leading to a heap-based buffer overflow, exists in the UnicodeString::doAppend() function in common/unistr.cpp.
מוצרים מושפעים
icu-project: international components for unicode; redhat: enterprise linux desktop; redhat: enterprise linux server; redhat: enterprise linux workstation; google: chrome; fedoraproject: fedora; debian: debian linux; canonical: ubuntu linux; opensuse: leap; oracle: banking extensibility workbench; nodejs: node.js
קישורים10
- chromium.googlesource.com/chromium/deps/icu/+/9f4020916eb1f28f… PatchThird Party Advisory
- github.com/unicode-org/icu/commit/b7d08bc04a4296982fcef8b6b8a3… PatchThird Party Advisory
- github.com/unicode-org/icu/pull/971 Issue TrackingPatchThird Party Advisory
- www.oracle.com/security-alerts/cpujan2021.html PatchThird Party Advisory
- chromium.googlesource.com/chromium/deps/icu/+/9f4020916eb1f28f… PatchThird Party Advisory
- github.com/unicode-org/icu/commit/b7d08bc04a4296982fcef8b6b8a3… PatchThird Party Advisory
- github.com/unicode-org/icu/pull/971 Issue TrackingPatchThird Party Advisory
- www.oracle.com/security-alerts/cpujan2021.html PatchThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2020-04/msg00004… Mailing ListThird Party Advisory
- access.redhat.com/errata/RHSA-2020:0738 Third Party Advisory
מדדים
- CVSS 3.1
-
8.8
HIGH
מקור הציון: NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - EPSS — סבירות ניצול
- 3% אחוזון 86 · נכון ל-2 בנובמבר 2026
- CWE
- CWE-190CWE-787