A stack buffer overflow was found in Internationl components for unicode (ICU ). While running the genrb binary, the 'subtag' struct overflowed at the SRBRoot::addTag function. This issue may lead to memory corruption and local arbitrary code execution.
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-icualma-upgrade-libicualma-upgrade-libicu-devel | Jul 31, 2025 | Jul 29, 2025 | |
| Alpine Linux | alpine-linux-upgrade-icu | Aug 8, 2025 | May 27, 2025 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-icuamazon-linux-ami-2-upgrade-icu-debuginfoamazon-linux-ami-2-upgrade-libicuamazon-linux-ami-2-upgrade-libicu-develamazon-linux-ami-2-upgrade-libicu-docamazon-linux-ami-2-upgrade-libicu60amazon-linux-ami-2-upgrade-libicu60-debuginfoamazon-linux-ami-2-upgrade-libicu60-develamazon-linux-ami-2-upgrade-libicu60-doc | May 20, 2026 | May 20, 2026 | |
| Amazon_linux_2023 | amazon-linux-2023-upgrade-icuamazon-linux-2023-upgrade-icu-debuginfoamazon-linux-2023-upgrade-icu-debugsourceamazon-linux-2023-upgrade-libicuamazon-linux-2023-upgrade-libicu-debuginfoamazon-linux-2023-upgrade-libicu-develamazon-linux-2023-upgrade-libicu-devel-debuginfoamazon-linux-2023-upgrade-libicu-doc | Jul 11, 2025 | Nov 14, 2024 | |
| Debian | debian-upgrade-icu | May 28, 2025 | May 28, 2025 | |
| Dell Powerstore Dsa2025429 | dell-powerstoreos-upgrade-latest | Dec 3, 2025 | Dec 2, 2025 | |
| Dell Powerstore Dsa2026039 | dell-powerstoreos-upgrade-latest | Jan 13, 2026 | Jan 6, 2026 | |
| Huawei Euleros 2_0_sp10 | huawei-euleros-2_0_sp10-upgrade-icu-helphuawei-euleros-2_0_sp10-upgrade-libicuhuawei-euleros-2_0_sp10-upgrade-libicu-devel | Nov 12, 2025 | Nov 6, 2025 | |
| Huawei Euleros 2_0_sp12 | huawei-euleros-2_0_sp12-upgrade-icu-helphuawei-euleros-2_0_sp12-upgrade-libicuhuawei-euleros-2_0_sp12-upgrade-libicu-devel | Nov 12, 2025 | Nov 6, 2025 | |
| Huawei Euleros 2_0_sp13 | huawei-euleros-2_0_sp13-upgrade-icu-helphuawei-euleros-2_0_sp13-upgrade-libicuhuawei-euleros-2_0_sp13-upgrade-libicu-devel | Nov 21, 2025 | Nov 6, 2025 | |
| Oracle_linux | — | oracle-linux-upgrade-icuoracle-linux-upgrade-libicuoracle-linux-upgrade-libicu-devel | Jul 29, 2025 | Nov 14, 2024 |
| Redhat_linux | redhat-upgrade-icuredhat-upgrade-icu-debuginforedhat-upgrade-icu-debugsourceredhat-upgrade-libicuredhat-upgrade-libicu-debuginforedhat-upgrade-libicu-develredhat-upgrade-libicu-devel-debuginfo | Jul 9, 2025 | May 27, 2025 | |
| Rocky_linux | rocky-upgrade-icurocky-upgrade-icu-debuginforocky-upgrade-icu-debugsourcerocky-upgrade-libicurocky-upgrade-libicu-debuginforocky-upgrade-libicu-develrocky-upgrade-libicu-devel-debuginfo | Feb 5, 2026 | Oct 4, 2025 | |
| Suse | — | suse-upgrade-icususe-upgrade-libicu-develsuse-upgrade-libicu-devel-32bitsuse-upgrade-libicu-docsuse-upgrade-libicu-suse65_1suse-upgrade-libicu-suse65_1-32bitsuse-upgrade-libicu52_1suse-upgrade-libicu52_1-32bitsuse-upgrade-libicu52_1-datasuse-upgrade-libicu60_2suse-upgrade-libicu60_2-bedatasuse-upgrade-libicu60_2-ledatasuse-upgrade-libicu65_1-bedatasuse-upgrade-libicu65_1-ledatasuse-upgrade-libicu77suse-upgrade-libicu77-bedatasuse-upgrade-libicu77-ledata | Jun 24, 2025 | May 27, 2025 |
| Ubuntu | no-fix-ubuntu-package | Jun 26, 2025 | May 27, 2025 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Aug 19, 2025 | May 27, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub