Yüksek CVSS 7
CVE-2025-5222: International Components For Unicode: arabellek taşması
Açıklama (NVD)
A stack buffer overflow was found in Internationl components for unicode (ICU ). While running the genrb binary, the 'subtag' struct overflowed at the SRBRoot::addTag function. This issue may lead to memory corruption and local arbitrary code execution.
Özet bilgiler
- Ürün
- Unicode International Components For Unicode
- CVSS v3.1
- 7
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H - EPSS
- %0,44 (yüzdelik 38)
- CWE
- CWE-120
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| unicode-international-components-for-unicode | — | — | 77.1 |
Kaynaklar
- NVD kaydı
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- bugzilla.redhat.com
- unicode-org.atlassian.net
- lists.debian.org
- cert-portal.siemens.com
- CWE-120