Vulnerabilities

TI-2025-04688 CVE-2025-5222 · GHSA-wv79-2fc4-v4hj

Icu: stack buffer overflow in the srbroot::addtag function

LOW 33

A stack buffer overflow was found in Internationl components for unicode (ICU ).

CVSS 3.1HIGH 7.0 Local No auth User interaction EPSS 0.00439 Published 2025-05-27 Partial fix · 78.1, 74.2-5.el10_0 +12 CWE-120

TI-2021-18909 CVE-2021-42694 · GHSA-m3pq-m926-j2h4

An issue was discovered in the character definitions of the Unicode Specification through…

HIGH 71

An issue was discovered in the character definitions of the Unicode Specification through 14.0.

CVSS 3.1HIGH 8.3 Network No auth User interaction EPSS 0.0491 Published 2021-11-01 No fix listed CWE-94

TI-2021-18854 CVE-2021-42574

An issue was discovered in the Bidirectional Algorithm in the Unicode Specification…

HIGH 71

An issue was discovered in the Bidirectional Algorithm in the Unicode Specification through 14.0.

CVSS 3.1HIGH 8.3 Network No auth User interaction EPSS 0.12881 Published 2021-11-01 Partial fix CWE-94

TI-2020-14202 CVE-2020-21913 · GHSA-3vq4-8jw3-cwr6

International Components for Unicode (ICU-20850) v66.1 was discovered to contain a use…

LOW 27

International Components for Unicode (ICU-20850) v66.1 was discovered to contain a use after free bug in the pkg_createWithAssemblyCode function in the file tools/pkgdata/pkgdata.cpp.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.01213 Published 2021-09-20 No fix listed CWE-416

TI-2016-08651 CVE-2016-10610 · GHSA-hw4r-xr38-hm8j

Cryptographic flaw in HackerOne unicode-json node module

LOW 36

unicode-json is a unicode lookup table.

CVSS 3.0HIGH 8.1 Network No auth No interaction EPSS 0.00537 Published 2018-06-01 Fixed in 2.0.0 CWE-311