Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Buffer Overflow in ICU Library Can Cause Application Crash
published 2 years ago
Summary
A bug in the ICU library, which is used by many applications for internationalization and Unicode support, can cause a buffer overflow when processing certain data. This can lead to a crash of the application. If you use the ICU library, you should update to the latest version to fix the issue.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| OSS-Fuzz | – | icu | All versions |
Original advisory text
Heap-buffer-overflow in icu_75::Locale::Locale
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65534
```
Crash type: Heap-buffer-overflow READ 1
Crash state:
icu_75::Locale::Locale
plurrule_fuzzer.cpp
```
```
Crash type: Heap-buffer-overflow READ 1
Crash state:
icu_75::Locale::Locale
plurrule_fuzzer.cpp
```
References
- https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65534 Third Party Advisory
Timeline
Published7 Jan 2024
Updated6 Mar 2026
First seen6 Mar 2026
Sources
OSV-2024-7 · OSV
Track software like this
Free during beta