CVE-2018-18928

International Components for Unicode (ICU) for C/C++ 63.1 has an integer overflow in number::impl::DecimalQuantity::toScientificString() in i18n/number_decimalquantity.cpp.

Score

CVSS 3.0 9.8 Critical

Status

Modified - cve@mitre.org

Published

2018-11-04

Last modified

2026-10-14

Weaknesses

CWE-190

Affected products

• International Components For Unicode (Icu-project)
• Simatic S7-1500 Cpu 1518-4 Pndp Mfp (Siemens)
• Simatic S7-1500 Cpu 1518f-4 Pndp Mfp (Siemens)
• Siplus S7-1500 Cpu 1518-4 Pndp Mfp (Siemens)

References

• https://github.com/unicode-org/icu/commit/53d8c8f3d181d87a6aa925b449b51c4a2c922a51
• https://unicode-org.atlassian.net/browse/ICU-20246
• https://bugs.chromium.org/p/chromium/issues/detail?id=900059
• https://cert-portal.siemens.com/productcert/html/ssa-398330.html