A stack buffer overflow was found in Internationl components for unicode (ICU ). While running the genrb binary, the 'subtag' struct overflowed at the SRBRoot::addTag function. This issue may lead to memory corruption and local arbitrary code execution.
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libicu-develUpgrade icuUpgrade libicu | Jul 31, 2025 | Jul 29, 2025 |
| Alpine Linux | — | Upgrade icu | Aug 8, 2025 | May 27, 2025 |
| Amazon Linux Ami 2 | — | Upgrade libicu-develUpgrade icu-debuginfoUpgrade libicu60-docUpgrade libicu60-develUpgrade libicu-docUpgrade libicu60-debuginfoUpgrade libicuUpgrade libicu60Upgrade icu | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade icuUpgrade libicuUpgrade icu-debugsourceUpgrade libicu-devel-debuginfoUpgrade icu-debuginfoUpgrade libicu-debuginfoUpgrade libicu-docUpgrade libicu-devel | Jul 11, 2025 | Nov 14, 2024 |
| Debian | — | Upgrade icu | May 28, 2025 | May 28, 2025 |
| Dell Powerstore Dsa2025429 | — | Upgrade Dell PowerStoreOS to the latest version | Dec 3, 2025 | Dec 2, 2025 |
| Dell Powerstore Dsa2026039 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Jan 6, 2026 |
| Huawei Euleros 2_0_sp10 | — | Upgrade libicu-develUpgrade libicuUpgrade icu-help | Nov 12, 2025 | Nov 6, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade libicuUpgrade icu-helpUpgrade libicu-devel | Nov 12, 2025 | Nov 6, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade libicu-develUpgrade libicuUpgrade icu-help | Nov 21, 2025 | Nov 6, 2025 |
| Oracle_linux | — | Upgrade libicuUpgrade icuUpgrade libicu-devel | Jul 29, 2025 | Nov 14, 2024 |
| Redhat_linux | — | No solution existsUpgrade libicu-devel-debuginfoUpgrade icu-debuginfoUpgrade libicu-debuginfoUpgrade libicuUpgrade libicu-develUpgrade icuUpgrade icu-debugsource | Jul 9, 2025 | May 27, 2025 |
| Rocky_linux | — | Upgrade libicu-debuginfoUpgrade icu-debuginfoUpgrade libicu-devel-debuginfoUpgrade libicuUpgrade libicu-develUpgrade icu-debugsourceUpgrade icu | Feb 5, 2026 | Oct 4, 2025 |
| Suse | — | Upgrade libicu-devel-32bitUpgrade libicu60_2-bedataUpgrade libicu-develUpgrade libicu52_1-dataUpgrade libicu77-bedataUpgrade libicu-docUpgrade libicu52_1Upgrade libicu60_2-ledataUpgrade libicu-suse65_1-32bitUpgrade libicu77-ledataUpgrade libicu52_1-32bitUpgrade libicu-suse65_1Upgrade libicu60_2Upgrade libicu77Upgrade libicu65_1-bedataUpgrade libicu65_1-ledataUpgrade icu | Jun 24, 2025 | May 27, 2025 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | May 27, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Aug 19, 2025 | May 27, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub