OSV-2023-1328

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/icu/OSV-2023-1328.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2023-1328
Published
2023-12-18T00:13:09Z
Modified
2026-09-13T19:14:45Z
Summary
Stack-buffer-overflow in icu_75::TZDBTimeZoneNames::getMetaZoneNames
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65128

Crash type: Stack-buffer-overflow WRITE 1
Crash state:
icu_75::TZDBTimeZoneNames::getMetaZoneNames
icu_75::TZDBTimeZoneNames::getMetaZoneDisplayName
TestNames
References

Affected packages

OSS-Fuzz / icu

Package

Name
icu
Purl
pkg:generic/icu

Affected ranges

Type
GIT
Repo
https://github.com/unicode-org/icu.git
Events
Introduced
5cf5ec1adbd2332b3cc289b5b1f5ca8324275fc3

Affected versions

icu4x/2024-05-03/75.*
icu4x/2024-05-03/75.x
icu4x/2024-05-16/75.*
icu4x/2024-05-16/75.x
icu4x/2024-12-16/76.*
icu4x/2024-12-16/76.x
icu4x/2025-05-01/77.*
icu4x/2025-05-01/77.x
icu4x/2025-05-21/77.*
icu4x/2025-05-21/77.x
icu4x/2026-07-01/79.*
icu4x/2026-07-01/79.x
icu4x/2026-08-31/79.*
icu4x/2026-08-31/79.x
Other
release-75-1
release-75-rc
release-76-1
release-76-rc
release-77-1
release-77-rc
release-78.*
release-78.1
release-78.1rc
release-78.1rc2
release-78.2
release-78.3

Ecosystem specific 

{
    "severity": "HIGH"
}

Database specific

source 
"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/icu/OSV-2023-1328.yaml"