Yüksek CVSS 8.8

CVE-2020-10531: International Components For Unicode: tamsayı taşması

Yayın: 12 Mart 2020 22:15 · Güncelleme: 6 Kasım 2026 09:48

Açıklama (NVD)

An issue was discovered in International Components for Unicode (ICU) for C/C++ through 66.1. An integer overflow, leading to a heap-based buffer overflow, exists in the UnicodeString::doAppend() function in common/unistr.cpp.

Özet bilgiler

Ürün: Icu-project International Components For Unicode
CVSS v3.1: 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS: %2,67 (yüzdelik 86)
CWE: CWE-190
Yama: Mevcut

Etkilenen sürümler

Ürün	Başlangıç	Bitiş	Düzeltildi
icu-project-international-components-for-unicode	—	66.1	—
redhat-enterprise-linux-desktop	6.0	6.0	—
redhat-enterprise-linux-server	6.0	6.0	—
redhat-enterprise-linux-workstation	6.0	6.0	—
google-chrome	—	—	80.0.3987.122
fedoraproject-fedora	30	30	—
fedoraproject-fedora	31	31	—
fedoraproject-fedora	33	33	—
debian-debian-linux	8.0	8.0	—
debian-debian-linux	9.0	9.0	—
debian-debian-linux	10.0	10.0	—
canonical-ubuntu-linux	12.04	12.04	—
canonical-ubuntu-linux	14.04	14.04	—
canonical-ubuntu-linux	16.04	16.04	—
canonical-ubuntu-linux	18.04	18.04	—
canonical-ubuntu-linux	19.10	19.10	—
opensuse-leap	15.1	15.1	—
oracle-banking-extensibility-workbench	14.3.0	14.3.0	—
oracle-banking-extensibility-workbench	14.4.0	14.4.0	—
nodejs-node.js	10.0.0	10.12.0	—
nodejs-node.js	10.13.0	—	10.21.0

Kaynaklar

Uygulamada aç Tüm CVE kayıtları