Skip to content
Noroxi

icu-project records

21 published records for vendor icu-project.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
4
With a fix record
95.2%
Median publish → KEV
No record has entered KEV

Records by year

  1. 17
  2. 18
  3. 20

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

21 records
  • CVE-2016-7415
    41Plan

    Stack-based buffer overflow in the Locale class in common/locid.cpp in International Components for Unicode (ICU) through 57.1 for C/C++ all

    CriticalCVSS 9.8No exploitEPSS 5%

    icu-project · international components for unicodeSep 17, 2016

  • CVE-2014-9911
    41Plan

    Stack-based buffer overflow in the ures_getByKeyWithFallback function in common/uresbund.cpp in International Components for Unicode (ICU) b

    CriticalCVSS 9.8No exploitEPSS 5%

    icu-project · international components for unicodeJan 4, 2017

  • CVE-2017-14952
    41Plan

    Double free in i18n/zonemeta.cpp in International Components for Unicode (ICU) for C/C++ through 59.1 allows remote attackers to execute arb

    CriticalCVSS 9.8No exploitEPSS 5%

    icu-project · international components for unicodeOct 16, 2017

  • CVE-2016-6293
    41Plan

    The uloc_acceptLanguageFromHTTP function in common/uloc.cpp in International Components for Unicode (ICU) through 57.1 for C/C++ does not en

    CriticalCVSS 9.8No exploitEPSS 5%

    icu-project · international components for unicodeJul 25, 2016

  • CVE-2015-5922
    41Plan

    Unspecified vulnerability in International Components for Unicode (ICU) before 53.1.0, as used in Apple OS X before 10.11 and watchOS before

    CriticalCVSS 10.0No exploitEPSS 2%

    apple · mac os xOct 9, 2015

  • CVE-2017-17484
    40Plan

    The ucnv_UTF8FromUTF8 function in ucnv_u8.cpp in International Components for Unicode (ICU) for C/C++ through 60.1 mishandles ucnv_convertEx

    CriticalCVSS 9.8No exploitEPSS 4%

    icu-project · international components for unicodeDec 10, 2017

  • CVE-2018-18928
    40Plan

    International Components for Unicode (ICU) for C/C++ 63.1 has an integer overflow in number::impl::DecimalQuantity::toScientificString() in

    CriticalCVSS 9.8No exploitEPSS 2%

    icu-project · international components for unicodeNov 4, 2018

  • CVE-2014-9654
    40Plan

    The Regular Expressions package in International Components for Unicode (ICU) for C/C++ before 2014-12-03, as used in Google Chrome before 4

    CriticalCVSS 9.8No exploitEPSS 2%

    google · chromeApr 24, 2017

  • CVE-2007-4771
    38Monitor

    Heap-based buffer overflow in the doInterval function in regexcmp.cpp in libicu in International Components for Unicode (ICU) 3.8.1 and earl

    CriticalCVSS 9.3No exploitEPSS 2%

    icu-project · international components for unicodeJan 28, 2008

  • CVE-2014-8146
    37Monitor

    The resolveImplicitLevels function in common/ubidi.c in the Unicode Bidirectional Algorithm implementation in ICU4C in International Compone

    HighCVSS 7.5Proof of conceptEPSS 24%

    apple · itunesMay 25, 2015

  • CVE-2014-8147
    37Monitor

    The resolveImplicitLevels function in common/ubidi.c in the Unicode Bidirectional Algorithm implementation in ICU4C in International Compone

    HighCVSS 7.5Proof of conceptEPSS 23%

    apple · mac os xMay 25, 2015

  • CVE-2020-10531
    36Monitor

    An issue was discovered in International Components for Unicode (ICU) for C/C++ through 66.1.

    HighCVSS 8.8No exploitEPSS 2%

    icu-project · international components for unicodeMar 12, 2020

  • CVE-2011-4599
    32Monitor

    Stack-based buffer overflow in the _canonicalize function in common/uloc.c in International Components for Unicode (ICU) before 49.1 allows

    HighCVSS 7.5No exploitEPSS 7%

    icu-project · international components for unicodeJun 21, 2012

  • CVE-2017-7867
    31Monitor

    International Components for Unicode (ICU) for C/C++ before 2017-02-13 has an out-of-bounds write caused by a heap-based buffer overflow rel

    HighCVSS 7.5No exploitEPSS 4%

    icu-project · international components for unicodeApr 14, 2017

  • CVE-2017-7868
    31Monitor

    International Components for Unicode (ICU) for C/C++ before 2017-02-13 has an out-of-bounds write caused by a heap-based buffer overflow rel

    HighCVSS 7.5No exploitEPSS 4%

    icu-project · international components for unicodeApr 14, 2017

  • CVE-2014-7926
    31Monitor

    The Regular Expressions package in International Components for Unicode (ICU) 52 before SVN revision 292944, as used in Google Chrome before

    HighCVSS 7.5No exploitEPSS 2%

    google · chromeJan 22, 2015

  • CVE-2014-7923
    31Monitor

    The Regular Expressions package in International Components for Unicode (ICU) 52 before SVN revision 292944, as used in Google Chrome before

    HighCVSS 7.5No exploitEPSS 2%

    google · chromeJan 22, 2015

  • CVE-2014-7940
    31Monitor

    The collator implementation in i18n/ucol.cpp in International Components for Unicode (ICU) 52 through SVN revision 293126, as used in Google

    HighCVSS 7.5No exploitEPSS 2%

    google · chromeJan 22, 2015

  • CVE-2007-4770
    28Monitor

    libicu in International Components for Unicode (ICU) 3.8.1 and earlier attempts to process backreferences to the nonexistent capture group z

    MediumCVSS 6.8No exploitEPSS 2%

    icu-project · international components for unicodeJan 28, 2008

  • CVE-2017-15422
    27Monitor

    Integer overflow in international date handling in International Components for Unicode (ICU) for C/C++ before 60.1, as used in V8 in Google

    MediumCVSS 6.5No exploitEPSS 2%

    google · chromeAug 28, 2018

  • CVE-2017-15396
    27Monitor

    A stack buffer overflow in NumberingSystem in International Components for Unicode (ICU) for C/C++ before 60.2, as used in V8 in Google Chro

    MediumCVSS 6.5No exploitEPSS 2%

    google · chromeAug 28, 2018