OSV-2020-867

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/icu/OSV-2020-867.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2020-867
Published
2020-07-14T22:13:50.339661Z
Modified
2023-02-24T01:38:19.452338Z
Summary
Heap-buffer-overflow in icu_64::CollationIterator::appendCEsFromCE32
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15613

Crash type: Heap-buffer-overflow READ 4
Crash state:
icu_64::CollationIterator::appendCEsFromCE32
icu_64::DataBuilderCollationIterator::fetchCEs
icu_64::CollationDataBuilder::getCEs
References

Affected packages

OSS-Fuzz / icu

Package

Name
icu
Purl
pkg:generic/icu

Affected ranges

Type
GIT
Repo
https://github.com/unicode-org/icu.git
Events
Introduced
6e5755a2a833bc64852eae12967d0a54d7adf629
Fixed
4833cc89b2fae2e8863b46bf1dc785964847e882

Affected versions

Other

cldr/2020-09-22
cldr/2020-10-21
cldr/2021-02-17
cldr/2021-03-09
cldr/2021-06-15
cldr/2021-08-11
cldr/2021-08-25
cldr/2021-09-15
cldr/2021-09-29
cldr/2021-10-19
cldr/2021-10-25
cldr/2022-02-08
cldr/2022-02-22
cldr/2022-02-23
cldr/2022-03-30
cldr/2022-03-31
release-65-1
release-65-rc
release-66-1
release-66-preview
release-66-rc
release-67-1
release-67-rc
release-68-1
release-68-2
release-68-alpha
release-68-rc
release-69-1
release-69-rc
release-70-1
release-70-rc
release-71-1
release-71-rc

icu4x/2022-06-30/71.*

icu4x/2022-06-30/71.x

icu4x/2022-07-18/71.*

icu4x/2022-07-18/71.x

icu4x/2022-07-25/71.*

icu4x/2022-07-25/71.x

icu4x/2022-08-17/71.*

icu4x/2022-08-17/71.x

Ecosystem specific 

{
    "severity": "MEDIUM"
}