CVE-2020-10531High· 8.8▾ TwilightAn issue was discovered in International Components for Unicode (ICU) for C/C++ through 66.1. An integer overflow, leading to a heap-based buffer overflow, exists in the UnicodeString::doAppend() function in common/unistr.cpp.
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 48.4 · likelihood 0.5 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
2.7%
An issue was discovered in International Components for Unicode (ICU) for C/C++ through 66.1. An integer overflow, leading to a heap-based buffer overflow, exists in the UnicodeString::doAppend() function in common/unistr.cpp.
international_components_for_unicode <= 66.1enterprise_linux_desktop = 6.0enterprise_linux_server = 6.0enterprise_linux_workstation = 6.0chrome < 80.0.3987.122fedora = 30fedora = 31fedora = 33debian_linux = 8.0debian_linux = 9.0debian_linux = 10.0ubuntu_linux = 12.04ubuntu_linux = 14.04ubuntu_linux = 16.04ubuntu_linux = 18.04ubuntu_linux = 19.10leap = 15.1banking_extensibility_workbench = 14.3.0banking_extensibility_workbench = 14.4.0node.js >= 10.0.0, <= 10.12.0node.js >= 10.13.0, < 10.21.0Upgrade past the affected range:
chrome 80.0.3987.122node.js 10.21.0Connected by shared product, vendor, weakness, or advisory.
CVE-2018-18928Critical· 9.8International Components for Unicode (ICU) for C/C++ 63.1 has an integer overflow in number::impl::DecimalQuantity::toScientificString() in i18n/number_decimalquantity.cpp.
CVE-2020-10543High· 8.2Perl before 5.30.3 on 32-bit platforms allows a heap-based buffer overflow because nested regular expression quantifiers have an integer overflow.
CVE-2021-3520Critical· 9.8There's a flaw in lz4
CVE-2019-3856High· 8.8An integer overflow flaw, which could lead to an out of bounds write, was discovered in libssh2 before 1.8.1 in the way keyboard prompt requests are parsed
CVE-2019-3857High· 8.8An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way SSH_MSG_CHANNEL_REQUEST packets with an exit signal are parsed
CVE-2019-3863High· 7.5A flaw was found in libssh2 before 1.8.1 creating a vulnerability on the SSH client side