Unicode - vulnerabilities (CVEs)

5 CVEs in 3 products, 0 in the last 30 days, newest from 2025-05-27.

Products

CVE-2025-5222 - CVSS 7 (high), 2025-05-27: A stack buffer overflow was found in Internationl components for unicode (ICU ). While running the genrb binary, the 'subtag' struct overflowed at the…
CVE-2021-42694 - CVSS 8.3 (high), 2021-11-01: An issue was discovered in the character definitions of the Unicode Specification through 14.0. The specification allows an adversary to produce source code…
CVE-2021-42574 - CVSS 8.3 (high), 2021-11-01: An issue was discovered in the Bidirectional Algorithm in the Unicode Specification through 14.0. It permits the visual reordering of characters via control…
CVE-2020-21913 - CVSS 5.5 (medium), 2021-09-20: International Components for Unicode (ICU-20850) v66.1 was discovered to contain a use after free bug in the pkg_createWithAssemblyCode function in the file…
CVE-2016-10610 - CVSS 8.1 (high), 2018-06-01: unicode-json is a unicode lookup table. unicode-json before 2.0.0 downloads data resources over HTTP, which leaves it vulnerable to MITM attacks.