CVE-2025-5222
Icu: stack buffer overflow in the srbroot::addtag function
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Icu: stack buffer overflow in the srbroot::addtag function
A stack buffer overflow was found in Internationl components for unicode (ICU ). While running the genrb binary, the 'subtag' struct overflowed at the SRBRoot::addTag function. This issue may lead to memory corruption and local arbitrary code execution.
Reserved 2025-05-26 | Published 2025-05-27 | Updated 2025-06-02 | Assigner redhatBuffer Copy without Checking Size of Input ('Classic Buffer Overflow')
| 2025-05-26: | Reported to Red Hat. |
| 2024-11-14: | Made public. |
access.redhat.com/security/cve/CVE-2025-5222
bugzilla.redhat.com/show_bug.cgi?id=2368600 (RHBZ#2368600)
Support options
