A stack buffer overflow was found in Internationl components for unicode (ICU ). While running the genrb binary, the 'subtag' struct overflowed at the SRBRoot::addTag function. This issue may lead to memory corruption and local arbitrary code execution.
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libicu-develUpgrade icuUpgrade libicu | Jul 31, 2025 | Jul 29, 2025 |
| Alpine Linux | — | Upgrade icu | Aug 8, 2025 | May 27, 2025 |
| Amazon Linux Ami 2 | — | Upgrade libicuUpgrade libicu60Upgrade icuUpgrade icu-debuginfoUpgrade libicu60-docUpgrade libicu60-debuginfoUpgrade libicu60-develUpgrade libicu-docUpgrade libicu-devel | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade libicuUpgrade libicu-devel-debuginfoUpgrade icu-debugsourceUpgrade icuUpgrade icu-debuginfoUpgrade libicu-develUpgrade libicu-debuginfoUpgrade libicu-doc | Jul 11, 2025 | Nov 14, 2024 |
| Debian | — | Upgrade icu | May 28, 2025 | May 28, 2025 |
| Dell Powerstore Dsa2025429 | — | Upgrade Dell PowerStoreOS to the latest version | Dec 3, 2025 | Dec 2, 2025 |
| Dell Powerstore Dsa2026039 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Jan 6, 2026 |
| Huawei Euleros 2_0_sp10 | — | Upgrade libicu-develUpgrade icu-helpUpgrade libicu | Nov 12, 2025 | Nov 6, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade icu-helpUpgrade libicuUpgrade libicu-devel | Nov 12, 2025 | Nov 6, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade libicu-develUpgrade libicuUpgrade icu-help | Nov 21, 2025 | Nov 6, 2025 |
| Oracle_linux | — | Upgrade icuUpgrade libicuUpgrade libicu-devel | Jul 29, 2025 | Nov 14, 2024 |
| Redhat Openshift | — | Upgrade rhcos | Aug 19, 2026 | Nov 14, 2024 |
| Redhat_linux | — | Upgrade libicu-develUpgrade libicu-debuginfoUpgrade icuUpgrade libicuUpgrade icu-debugsourceUpgrade icu-debuginfoNo solution existsUpgrade libicu-devel-debuginfo | Jul 9, 2025 | May 27, 2025 |
| Rocky_linux | — | Upgrade icuUpgrade icu-debugsourceUpgrade libicu-devel-debuginfoUpgrade libicuUpgrade icu-debuginfoUpgrade libicu-develUpgrade libicu-debuginfo | Feb 5, 2026 | Oct 4, 2025 |
| Suse | — | Upgrade libicu60_2Upgrade icuUpgrade libicu-suse65_1-32bitUpgrade libicu65_1-ledataUpgrade libicu77-ledataUpgrade libicu-suse65_1Upgrade libicu52_1-32bitUpgrade libicu65_1-bedataUpgrade libicu77Upgrade libicu-develUpgrade libicu77-bedataUpgrade libicu52_1Upgrade libicu-devel-32bitUpgrade libicu-docUpgrade libicu52_1-dataUpgrade libicu60_2-ledataUpgrade libicu60_2-bedata | Jun 24, 2025 | May 27, 2025 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | May 27, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Aug 19, 2025 | May 27, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub