A stack buffer overflow was found in Internationl components for unicode (ICU ). While running the genrb binary, the 'subtag' struct overflowed at the SRBRoot::addTag function. This issue may lead to memory corruption and local arbitrary code execution.
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libicu-develUpgrade icuUpgrade libicu | Jul 31, 2025 | Jul 29, 2025 |
| Alpine Linux | — | Upgrade icu | Aug 8, 2025 | May 27, 2025 |
| Amazon Linux Ami 2 | — | Upgrade libicu60-debuginfoUpgrade libicu-docUpgrade libicu60-docUpgrade libicu-develUpgrade libicu60-develUpgrade icu-debuginfoUpgrade icuUpgrade libicuUpgrade libicu60 | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade libicu-docUpgrade icu-debuginfoUpgrade libicu-develUpgrade libicu-debuginfoUpgrade icu-debugsourceUpgrade libicu-devel-debuginfoUpgrade libicuUpgrade icu | Jul 11, 2025 | Nov 14, 2024 |
| Debian | — | Upgrade icu | May 28, 2025 | May 28, 2025 |
| Dell Powerstore Dsa2025429 | — | Upgrade Dell PowerStoreOS to the latest version | Dec 3, 2025 | Dec 2, 2025 |
| Dell Powerstore Dsa2026039 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Jan 6, 2026 |
| Huawei Euleros 2_0_sp10 | — | Upgrade libicu-develUpgrade icu-helpUpgrade libicu | Nov 12, 2025 | Nov 6, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade libicuUpgrade icu-helpUpgrade libicu-devel | Nov 12, 2025 | Nov 6, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade libicuUpgrade libicu-develUpgrade icu-help | Nov 21, 2025 | Nov 6, 2025 |
| Oracle_linux | — | Upgrade libicu-develUpgrade icuUpgrade libicu | Jul 29, 2025 | Nov 14, 2024 |
| Redhat Openshift | — | Upgrade rhcos | Aug 19, 2026 | Nov 14, 2024 |
| Redhat_linux | — | Upgrade libicu-develUpgrade icu-debugsourceUpgrade icuUpgrade libicuUpgrade libicu-debuginfoNo solution existsUpgrade icu-debuginfoUpgrade libicu-devel-debuginfo | Jul 9, 2025 | May 27, 2025 |
| Rocky_linux | — | Upgrade icu-debuginfoUpgrade libicuUpgrade libicu-debuginfoUpgrade libicu-devel-debuginfoUpgrade libicu-develUpgrade icuUpgrade icu-debugsource | Feb 5, 2026 | Oct 4, 2025 |
| Suse | — | Upgrade icuUpgrade libicu-suse65_1-32bitUpgrade libicu-suse65_1Upgrade libicu65_1-ledataUpgrade libicu60_2Upgrade libicu52_1-32bitUpgrade libicu77-ledataUpgrade libicu77Upgrade libicu65_1-bedataUpgrade libicu52_1-dataUpgrade libicu77-bedataUpgrade libicu-devel-32bitUpgrade libicu60_2-bedataUpgrade libicu-develUpgrade libicu52_1Upgrade libicu-docUpgrade libicu60_2-ledata | Jun 24, 2025 | May 27, 2025 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | May 27, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Aug 19, 2025 | May 27, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub