The resolveImplicitLevels function in common/ubidi.c in the Unicode Bidirectional Algorithm implementation in ICU4C in International Components for Unicode (ICU) before 55.1 uses an integer data type that is inconsistent with a header file, which allows remote attackers to cause a denial of service (incorrect malloc followed by invalid free) or possibly execute arbitrary code via crafted text.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Itunes | — | Upgrade Apple iTunes to the latest version | Oct 7, 2015 | May 25, 2015 |
| Apple Osx Icu | — | Upgrade macOS to the latest version | Apr 5, 2017 | May 25, 2015 |
| Debian | — | Upgrade icu | Jul 30, 2024 | May 25, 2015 |
| Gentoo Linux | — | Upgrade dev-libs/icu. | Oct 30, 2017 | May 25, 2015 |
| Oracle Solaris | — | Upgrade consolidation/l10n/l10n-incorporation to version 0.5.11-0.175.3.0.0.26.2 on Solaris 11.3Upgrade entire to version 0.5.11-0.175.3.0.0.30.0 on Solaris 11.3 | May 29, 2017 | May 25, 2015 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 5, 2015 |
| Suse | — | Upgrade myspell-et_EEUpgrade myspell-en_GHUpgrade libreoffice-l10n-mrUpgrade libreoffice-l10n-ocUpgrade libreoffice-l10n-bgUpgrade myspell-lightproof-enUpgrade libreoffice-pyunoUpgrade myspell-lt_LTUpgrade myspell-ar_QAUpgrade malaga-suomiUpgrade libreoffice-l10n-sdUpgrade libmwaw-0_3-3Upgrade libloaderUpgrade libmspub-0_1-1Upgrade libreoffice-calc-extensionsUpgrade myspell-ar_TNUpgrade myspell-ar_AEUpgrade libodfgen-devel-docUpgrade libixion-0_10-0Upgrade libabw-develUpgrade myspell-fr_CAUpgrade libmwaw-devel-docUpgrade libreoffice-l10n-afUpgrade pentaho-reporting-flow-engineUpgrade myspell-hi_INUpgrade myspell-en_ZWUpgrade libreoffice-l10n-mnUpgrade apache-commons-loggingUpgrade libreoffice-gnomeUpgrade libreoffice-l10n-astUpgrade libreoffice-l10n-hiUpgrade libreoffice-baseUpgrade libfreehand-0_1-1Upgrade myspell-en_USUpgrade libreoffice-l10n-dzUpgrade myspell-he_ILUpgrade libreoffice-l10n-ssUpgrade myspell-en_AUUpgrade libetonyek-develUpgrade libreoffice-l10n-svUpgrade libreoffice-l10n-viUpgrade libicu52_1-dataUpgrade libreoffice-officebeanUpgrade libreoffice-l10n-bn_inUpgrade myspell-sr_RSUpgrade libreoffice-gtk2Upgrade libreoffice-l10n-brxUpgrade libreoffice-l10n-skUpgrade myspell-de_ATUpgrade myspell-ar_EGUpgrade myspell-es_PAUpgrade libreoffice-l10n-kkUpgrade libreoffice-l10n-zh_cnUpgrade libreoffice-l10n-szlUpgrade myspell-vi_VNUpgrade myspell-ca_FRUpgrade libreoffice-l10n-ruUpgrade libreoffice-share-linkerUpgrade libreoffice-l10n-trUpgrade libreoffice-l10n-orUpgrade libreoffice-l10n-sqUpgrade myspell-fr_BEUpgrade libreoffice-l10n-nrUpgrade libreoffice-sdk-docUpgrade myspell-ar_KWUpgrade libodfgen-develUpgrade libreoffice-l10n-neUpgrade libreoffice-l10n-pt-PTUpgrade libreoffice-l10n-pt_brUpgrade libreoffice-l10n-srUpgrade libreoffice-l10n-lbUpgrade libreoffice-l10n-dsbUpgrade libreoffice-l10n-sidUpgrade librepositoryUpgrade libformulaUpgrade myspell-sv_FIUpgrade icuUpgrade myspell-en_BZUpgrade libgltf-0_0-0Upgrade libicu52_1-32bitUpgrade liborcus-develUpgrade libicu52_1Upgrade myspell-hr_HRUpgrade libreoffice-l10n-sa_inUpgrade libreoffice-sdkUpgrade myspell-sr_Latn_RSUpgrade myspell-de_DEUpgrade libreoffice-l10n-elUpgrade libreoffice-l10n-daUpgrade libfreehand-develUpgrade libreofficeUpgrade libreoffice-l10n-vecUpgrade myspell-sv_SEUpgrade libicu-develUpgrade libcdr-0_1-1Upgrade myspell-en_IEUpgrade myspell-fr_FRUpgrade libpagemaker-0_0-0Upgrade libbaseUpgrade myspell-es_CUUpgrade myspell-en_NAUpgrade libreoffice-l10n-taUpgrade libreoffice-impressUpgrade libreoffice-l10n-koUpgrade libreoffice-l10n-bnUpgrade libreoffice-l10n-csUpgrade myspell-en_BSUpgrade myspell-hu_HUUpgrade myspell-deUpgrade libreoffice-l10n-knUpgrade libreoffice-l10n-slUpgrade libreoffice-l10n-idUpgrade myspell-bsUpgrade libreoffice-icon-theme-tangoUpgrade libreoffice-l10n-nsoUpgrade myspell-sl_SIUpgrade myspell-nl_BEUpgrade myspell-ar_SYUpgrade myspell-fr_LUUpgrade libreoffice-l10n-kmUpgrade libreoffice-voikkoUpgrade myspell-sr_CSUpgrade libreoffice-l10n-eoUpgrade myspell-es_MXUpgrade libreoffice-l10n-etUpgrade libreoffice-l10n-asUpgrade libreoffice-l10n-faUpgrade libreoffice-l10n-boUpgrade libe-book-develUpgrade fluteUpgrade libreoffice-l10n-roUpgrade libreoffice-l10n-deUpgrade libreoffice-base-drivers-postgresqlUpgrade myspell-pl_PLUpgrade libreoffice-l10n-paUpgrade libreoffice-l10n-en_gbUpgrade myspell-en_PHUpgrade libwps-0_4-4Upgrade myspell-es_PYUpgrade python-importlibUpgrade libreoffice-l10n-thUpgrade libreoffice-kde4Upgrade myspell-sr_Latn_CSUpgrade libicu-docUpgrade libreoffice-l10n-gaUpgrade libreoffice-writer-extensionsUpgrade myspell-caUpgrade libreoffice-l10n-ksUpgrade libreoffice-l10n-huUpgrade myspell-lightproof-hu_HUUpgrade libreoffice-l10n-uzUpgrade libreoffice-mathUpgrade libmspub-devel-docUpgrade libfontsUpgrade libreoffice-l10n-en_zaUpgrade myspell-de_CHUpgrade libreoffice-l10n-heUpgrade libreoffice-l10n-arUpgrade libreoffice-filters-optionalUpgrade liblangtag-develUpgrade libreoffice-l10n-esUpgrade libfreehand-devel-docUpgrade libreoffice-l10n-omUpgrade librevenge-generators-0_0-0Upgrade myspell-be_BYUpgrade libreoffice-l10n-ckbUpgrade libvoikko1Upgrade libreoffice-l10n-tnUpgrade myspell-pt_AOUpgrade myspell-en_GBUpgrade myspell-srUpgrade myspell-bn_BDUpgrade libixion-develUpgrade libreoffice-l10n-beUpgrade liblayoutUpgrade libreoffice-l10n-caUpgrade libgraphite2-3Upgrade libreoffice-l10n-nlUpgrade libreoffice-l10n-kmr_latnUpgrade libe-book-0_1-1Upgrade myspell-ar_SDUpgrade libreoffice-gdb-pretty-printersUpgrade libreoffice-l10n-pt-BRUpgrade libreoffice-l10n-furUpgrade libreoffice-l10n-cyUpgrade myspell-es_HNUpgrade libwps-develUpgrade libreoffice-l10n-zuUpgrade libvisio-devel-docUpgrade libreoffice-librelogoUpgrade myspell-esUpgrade myspell-ar_JOUpgrade libreoffice-l10n-mkUpgrade myspell-arUpgrade libreoffice-l10n-zh_twUpgrade myspell-es_COUpgrade libreoffice-l10n-maiUpgrade libreoffice-l10n-lvUpgrade libgraphite2-3-32bitUpgrade myspell-ca_ADUpgrade libreoffice-l10n-frUpgrade myspell-es_ESUpgrade myspell-ar_LBUpgrade myspell-en_CAUpgrade myspell-lightproof-ru_RUUpgrade myspell-en_ZAUpgrade libcdr-develUpgrade myspell-pt_PTUpgrade myspell-fr_CHUpgrade libreoffice-l10n-tsUpgrade myspell-noUpgrade libmspub-develUpgrade libetonyek-devel-docUpgrade libreoffice-l10n-nbUpgrade libcmis-develUpgrade libcmis-0_5-5Upgrade libreoffice-l10n-gugUpgrade myspell-ar_SAUpgrade libe-book-devel-docUpgrade myspell-ar_MAUpgrade librevenge-develUpgrade myspell-dictionariesUpgrade myspell-es_BOUpgrade myspell-ar_DZUpgrade myspell-en_INUpgrade libreoffice-l10n-hrUpgrade myspell-viUpgrade myspell-lightproof-pt_BRUpgrade graphite2-develUpgrade libreoffice-l10n-siUpgrade libreoffice-gladeUpgrade myspell-nl_NLUpgrade myspell-ar_OMUpgrade libreoffice-l10n-jaUpgrade myspell-en_JMUpgrade myspell-bg_BGUpgrade libreoffice-gtk3Upgrade libreoffice-l10n-glUpgrade myspell-en_TTUpgrade libreoffice-l10n-mniUpgrade myspell-es_GTUpgrade libreoffice-l10n-xhUpgrade libreoffice-l10n-amUpgrade libcmis-c-0_5-5Upgrade myspell-te_INUpgrade libreoffice-l10n-fyUpgrade libreoffice-l10n-pt_ptUpgrade librevenge-stream-0_0-0Upgrade libreoffice-mailmergeUpgrade myspell-lv_LVUpgrade myspell-bs_BAUpgrade myspell-en_MWUpgrade myspell-ro_ROUpgrade libreoffice-l10n-ltUpgrade myspell-zu_ZAUpgrade libreoffice-l10n-zh-HansUpgrade libreoffice-l10n-stUpgrade libodfgen-0_1-1Upgrade myspell-ar_BHUpgrade libreoffice-base-drivers-mysqlUpgrade myspell-ar_LYUpgrade libreoffice-l10n-nnUpgrade myspell-af_NAUpgrade libreoffice-l10n-zh-HantUpgrade myspell-it_ITUpgrade myspell-sk_SKUpgrade libreoffice-l10n-guUpgrade myspell-es_NIUpgrade myspell-th_THUpgrade libreoffice-icon-themesUpgrade myspell-ar_YEUpgrade libabw-0_1-1Upgrade libreoffice-l10n-euUpgrade sacUpgrade myspell-da_DKUpgrade libcdr-devel-docUpgrade myspell-ca_ES_valenciaUpgrade myspell-es_DOUpgrade libreoffice-l10n-tgUpgrade libreoffice-l10n-isUpgrade myspell-es_VEUpgrade libreoffice-l10n-plUpgrade libreoffice-l10n-sw_tzUpgrade libreoffice-writerUpgrade libvisio-0_1-1Upgrade libserializerUpgrade libreoffice-l10n-kabUpgrade libreoffice-l10n-ttUpgrade libvisio-develUpgrade libreoffice-l10n-kaUpgrade mythes-develUpgrade myspell-nb_NOUpgrade myspell-ar_IQUpgrade libreoffice-l10n-gdUpgrade libreoffice-l10n-loUpgrade hyphen-develUpgrade libreoffice-l10n-fiUpgrade myspell-ru_RUUpgrade libmythes-1_2-0Upgrade libreoffice-l10n-ukUpgrade myspell-es_CRUpgrade myspell-roUpgrade libreoffice-branding-upstreamUpgrade libreoffice-drawUpgrade myspell-teUpgrade myspell-gu_INUpgrade libcmis-c-develUpgrade myspell-es_PRUpgrade libabw-devel-docUpgrade myspell-fr_MCUpgrade libetonyek-0_1-1Upgrade libreofficekit-develUpgrade myspell-nn_NOUpgrade myspell-es_SVUpgrade libreoffice-l10n-ca_valenciaUpgrade myspell-af_ZAUpgrade myspell-pt_BRUpgrade myspell-es_PEUpgrade libreoffice-l10n-kokUpgrade libreoffice-l10n-veUpgrade libreoffice-l10n-teUpgrade libreoffice-l10n-itUpgrade myspell-cs_CZUpgrade libreoffice-qt5Upgrade libreoffice-l10n-brUpgrade libreoffice-l10n-rwUpgrade libhyphen0Upgrade libreoffice-calcUpgrade libreoffice-l10n-dgoUpgrade myspell-es_ARUpgrade libreofficekitUpgrade myspell-ca_ESUpgrade pentaho-libxmlUpgrade myspell-en_NZUpgrade myspell-es_ECUpgrade libvoikko-develUpgrade libreoffice-l10n-satUpgrade libreoffice-l10n-mlUpgrade myspell-es_CLUpgrade myspell-enUpgrade libreoffice-l10n-enUpgrade libreoffice-l10n-myUpgrade libreoffice-l10n-ugUpgrade libreoffice-l10n-hsbUpgrade myspell-lo_LAUpgrade liblangtag1Upgrade myspell-ca_ITUpgrade libreoffice-icon-theme-galaxyUpgrade libmwaw-develUpgrade librevenge-0_0-0Upgrade google-carlito-fontsUpgrade libreoffice-l10n-bsUpgrade myspell-es_UYUpgrade liborcus-0_8-0Upgrade myspell-bn_INUpgrade myspell-el_GR | Dec 18, 2015 | May 25, 2015 |
| Ubuntu | — | Upgrade libicu52 | Nov 8, 2024 | May 25, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub