A stack buffer overflow was found in Internationl components for unicode (ICU ). While running the genrb binary, the 'subtag' struct overflowed at the SRBRoot::addTag function. This issue may lead to memory corruption and local arbitrary code execution.
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libicuUpgrade icuUpgrade libicu-devel | Jul 31, 2025 | Jul 29, 2025 |
| Alpine Linux | — | Upgrade icu | Aug 8, 2025 | May 27, 2025 |
| Amazon Linux Ami 2 | — | Upgrade libicu60-develUpgrade libicu60-docUpgrade libicu60-debuginfoUpgrade libicu-docUpgrade libicu-develUpgrade icu-debuginfoUpgrade libicuUpgrade icuUpgrade libicu60 | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade libicu-devel-debuginfoUpgrade icu-debugsourceUpgrade libicuUpgrade icuUpgrade libicu-debuginfoUpgrade libicu-develUpgrade icu-debuginfoUpgrade libicu-doc | Jul 11, 2025 | Nov 14, 2024 |
| Debian | — | Upgrade icu | May 28, 2025 | May 28, 2025 |
| Dell Powerstore Dsa2025429 | — | Upgrade Dell PowerStoreOS to the latest version | Dec 3, 2025 | Dec 2, 2025 |
| Dell Powerstore Dsa2026039 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Jan 6, 2026 |
| Huawei Euleros 2_0_sp10 | — | Upgrade libicuUpgrade libicu-develUpgrade icu-help | Nov 12, 2025 | Nov 6, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade libicu-develUpgrade libicuUpgrade icu-help | Nov 12, 2025 | Nov 6, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade libicu-develUpgrade libicuUpgrade icu-help | Nov 21, 2025 | Nov 6, 2025 |
| Oracle_linux | — | Upgrade icuUpgrade libicuUpgrade libicu-devel | Jul 29, 2025 | Nov 14, 2024 |
| Redhat Openshift | — | Upgrade rhcos | Aug 19, 2026 | Nov 14, 2024 |
| Redhat_linux | — | Upgrade icu-debuginfoUpgrade libicu-devel-debuginfoNo solution existsUpgrade libicu-debuginfoUpgrade icu-debugsourceUpgrade icuUpgrade libicuUpgrade libicu-devel | Jul 9, 2025 | May 27, 2025 |
| Rocky_linux | — | Upgrade libicu-develUpgrade libicuUpgrade libicu-debuginfoUpgrade icu-debuginfoUpgrade libicu-devel-debuginfoUpgrade icuUpgrade icu-debugsource | Feb 5, 2026 | Oct 4, 2025 |
| Suse | — | Upgrade libicu-develUpgrade libicu60_2-ledataUpgrade libicu52_1Upgrade libicu77-bedataUpgrade libicu-docUpgrade libicu-devel-32bitUpgrade libicu60_2-bedataUpgrade libicu52_1-dataUpgrade libicu-suse65_1Upgrade libicu77Upgrade libicu52_1-32bitUpgrade libicu65_1-bedataUpgrade icuUpgrade libicu-suse65_1-32bitUpgrade libicu65_1-ledataUpgrade libicu60_2Upgrade libicu77-ledata | Jun 24, 2025 | May 27, 2025 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | May 27, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Aug 19, 2025 | May 27, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub