CVE-2020-10531

HIGH8.8EPSS 0.79%

icu - security update

Published: 3/12/2020Modified: 12/3/2025
Also known as:ALPINE-CVE-2020-10531DEBIAN-CVE-2020-10531

Description

An issue was discovered in International Components for Unicode (ICU) for C/C++ through 66.1. An integer overflow, leading to a heap-based buffer overflow, exists in the UnicodeString::doAppend() function in common/unistr.cpp.

Affected packages (6)

CVSS scores

SourceVersionSeverityVector
osvCVSS 3.1HIGH8.8CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

References (21)