Every CVE Search/ Get API key

CVE-2025-5222

Icu: stack buffer overflow in the srbroot::addtag function

7.0 HighPublic exploitFix available

A stack buffer overflow was found in Internationl components for unicode (ICU ). While running the genrb binary, the 'subtag' struct overflowed at the SRBRoot::addTag function. This issue may lead to memory corruption and local arbitrary code execution.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
High
Privileges needed
None
User interaction
Required

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

0.44%Up 0.4 points since May 28, 2025
90%50%10%1%

What each source reports

CVE List Score used 7.0

Icu: stack buffer overflow in the srbroot::addtag function

A stack buffer overflow was found in Internationl components for unicode (ICU ). While running the genrb binary, the 'subtag' struct overflowed at the SRBRoot::addTag function. This issue may lead to memory corruption and local arbitrary code execution.

Record
CVE-2025-5222
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness
CWE-120
Updated
2026-11-05
EUVDEUVD-2025-16306 7.0

A stack buffer overflow was found in Internationl components for unicode (ICU ). While running the genrb binary, the 'subtag' struct overflowed at the SRBRoot::addTag function. This issue may lead to memory corruption and local arbitrary code execution.

Record
EUVD-2025-16306
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-05
GitHub AdvisoriesGHSA-wv79-2fc4-v4hj 7.0

A stack buffer overflow was found in Internationl components for unicode (ICU ). While running...

A stack buffer overflow was found in Internationl components for unicode (ICU ). While running the genrb binary, the 'subtag' struct overflowed at the SRBRoot::addTag function. This issue may lead to memory corruption and local arbitrary code execution.

Record
GHSA-wv79-2fc4-v4hj
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness
CWE-120
Updated
2026-11-02
NVD 7.0

A stack buffer overflow was found in Internationl components for unicode (ICU ). While running the genrb binary, the 'subtag' struct overflowed at the SRBRoot::addTag function. This issue may lead to memory corruption and local arbitrary code execution.

Record
CVE-2025-5222
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness
CWE-120
Updated
2026-11-05
OSVALPINE-CVE-2025-5222 7.0

A stack buffer overflow was found in Internationl components for unicode (ICU ). While running the genrb binary, the 'subtag' struct overflowed at the SRBRoot::addTag function. This issue may lead to memory corruption and local arbitrary code execution.

Record
ALPINE-CVE-2025-5222
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVBELL-CVE-2025-5222 7.0
Record
BELL-CVE-2025-5222
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 26 moreShow less
OSV 7.0

Icu: stack buffer overflow in the srbroot::addtag function

A stack buffer overflow was found in Internationl components for unicode (ICU ). While running the genrb binary, the 'subtag' struct overflowed at the SRBRoot::addTag function. This issue may lead to memory corruption and local arbitrary code execution.

Record
CVE-2025-5222
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness
CWE-120
Updated
2026-11-07
OSVDEBIAN-CVE-2025-5222 7.0

A stack buffer overflow was found in Internationl components for unicode (ICU ). While running the genrb binary, the 'subtag' struct overflowed at the SRBRoot::addTag function. This issue may lead to memory corruption and local arbitrary code execution.

Record
DEBIAN-CVE-2025-5222
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2025-1982 7.0

icu security update

Tools and utilities for developing with icu.

Security Fix(es):

A stack buffer overflow was found in Internationl components for unicode (ICU ). While running the genrb binary, the 'subtag' struct overflowed at the SRBRoot::addTag function. This issue may lead to memory corruption and local arbitrary code execution.(CVE-2025-5222)

Record
OESA-2025-1982
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:11888 7.0

Red Hat Security Advisory: icu security update

Record
RHSA-2025:11888
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:12083 7.0

Red Hat Security Advisory: icu security update

Record
RHSA-2025:12083
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:12331 7.0

Red Hat Security Advisory: icu security update

Record
RHSA-2025:12331
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:12332 7.0

Red Hat Security Advisory: icu security update

Record
RHSA-2025:12332
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:12333 7.0

Red Hat Security Advisory: icu security update

Record
RHSA-2025:12333
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2025:11888 7.0

Moderate: icu security update

The International Components for Unicode (ICU) library provides robust and full-featured Unicode services.

Security Fix(es):

  • icu: Stack buffer overflow in the SRBRoot::addTag function (CVE-2025-5222)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2025:11888
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2025:12083 7.0

Moderate: icu security update

The International Components for Unicode (ICU) library provides robust and full-featured Unicode services.

Security Fix(es):

  • icu: Stack buffer overflow in the SRBRoot::addTag function (CVE-2025-5222)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2025:12083
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2025-5222 7.0

A stack buffer overflow was found in Internationl components for unicode (ICU ). While running the genrb binary, the 'subtag' struct overflowed at the SRBRoot::addTag function. This issue may lead to memory corruption and local arbitrary code execution.

Record
UBUNTU-CVE-2025-5222
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVALSA-2025:11888 No score

Moderate: icu security update

The International Components for Unicode (ICU) library provides robust and full-featured Unicode services.

Security Fix(es):

  • icu: Stack buffer overflow in the SRBRoot::addTag function (CVE-2025-5222)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2025:11888
Updated
2026-11-02
OSVALSA-2025:12083 No score

Moderate: icu security update

The International Components for Unicode (ICU) library provides robust and full-featured Unicode services.

Security Fix(es):

  • icu: Stack buffer overflow in the SRBRoot::addTag function (CVE-2025-5222)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2025:12083
Updated
2026-11-02
OSVAZL-66147 No score

CVE-2025-5222 affecting package icu for versions less than 68.2.0.9-2

A stack buffer overflow was found in Internationl components for unicode (ICU ). While running the genrb binary, the 'subtag' struct overflowed at the SRBRoot::addTag function. This issue may lead to memory corruption and local arbitrary code execution.

Record
AZL-66147
Updated
2026-11-02
OSVAZL-66156 No score

CVE-2025-5222 affecting package icu for versions less than 72.1.0.3-2

A stack buffer overflow was found in Internationl components for unicode (ICU ). While running the genrb binary, the 'subtag' struct overflowed at the SRBRoot::addTag function. This issue may lead to memory corruption and local arbitrary code execution.

Record
AZL-66156
Updated
2026-11-05
OSVAZL-69692 No score

CVE-2025-5222 affecting package nodejs for versions less than 20.14.0-10

A stack buffer overflow was found in Internationl components for unicode (ICU ). While running the genrb binary, the 'subtag' struct overflowed at the SRBRoot::addTag function. This issue may lead to memory corruption and local arbitrary code execution.

Record
AZL-69692
Updated
2026-11-02
OSVAZL-69706 No score

CVE-2025-5222 affecting package nodejs18 for versions less than 18.20.3-10

A stack buffer overflow was found in Internationl components for unicode (ICU ). While running the genrb binary, the 'subtag' struct overflowed at the SRBRoot::addTag function. This issue may lead to memory corruption and local arbitrary code execution.

Record
AZL-69706
Updated
2026-11-02
OSVCLSA-2025-1762539763 No score

icu: Fix of CVE-2025-5222

  • CVE-2025-5222: fix stack buffer overflow in genrb binary by properly handling 'subtag' struct in SRBRoot::addTag function
Record
CLSA-2025-1762539763
Updated
2026-11-02
OSVCLSA-2026-1774269500 No score

icu: Fix of CVE-2025-5222

  • CVE-2025-5222: Fix stack buffer overflow in addTag handling that allowed subtag struct overflow leading to memory corruption and local arbitrary code execution
Record
CLSA-2026-1774269500
Updated
2026-11-02
OSVCLSA-2026-1774273758 No score

icu: Fix of CVE-2025-5222

  • CVE-2025-5222: Fix stack buffer overflow in addTag handling that allowed subtag struct overflow leading to memory corruption and local arbitrary code execution
Record
CLSA-2026-1774273758
Updated
2026-11-02
OSVCLSA-2026-1787152014 No score

Fix CVE(s): CVE-2025-5222

  • SECURITY UPDATE: stack buffer overflow in the genrb resource-bundle compiler
    • debian/patches/CVE-2025-5222.patch: replace the fixed-size 1024-byte subtag/typeKeyword stack buffers in addCollation(), parseCollationElements() and realParseTable() with CharString in source/tools/genrb/parse.cpp, and add the CharString UChar* overload it needs to source/common/charstr.{cpp,h}.
    • CVE-2025-5222
Record
CLSA-2026-1787152014
Updated
2026-11-02
OSVMGASA-2025-0249 No score

Updated icu packages fix security vulnerability

A stack buffer overflow was found in Internationl components for unicode (ICU ). While running the genrb binary, the 'subtag' struct overflowed at the SRBRoot::addTag function. This issue may lead to memory corruption and local arbitrary code execution.

Record
MGASA-2025-0249
Updated
2026-11-02
OSVopenSUSE-SU-2025:15230-1 No score

icu-77.1-3.1 on GA media

These are all security issues fixed in the icu-77.1-3.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2025:15230-1
Updated
2026-11-02
OSVSUSE-SU-2025:02059-1 No score

Security update for icu

This update for icu fixes the following issues:

  • CVE-2025-5222: Stack buffer overflow in the SRBRoot:addTag function (bsc#1243721).
Record
SUSE-SU-2025:02059-1
Updated
2026-11-02
OSVSUSE-SU-2025:02079-1 No score

Security update for icu

This update for icu fixes the following issues:

  • CVE-2025-5222: Stack buffer overflow in the SRBRoot:addTag function (bsc#1243721).
Record
SUSE-SU-2025:02079-1
Updated
2026-11-02
OSVSUSE-SU-2025:02216-1 No score

Security update for icu

This update for icu fixes the following issues:

  • CVE-2025-5222: Fixed stack buffer overflow in the SRBRoot:addTag function (bsc#1243721)
Record
SUSE-SU-2025:02216-1
Updated
2026-11-02

Affected products

Show 7 moreShow less

Affected packages

Affected packages
PackageAffectedFixed
icu
Alpine:v3.19
 before 74.1-r1
74.1-r1
icu
Alpine:v3.20
 before 74.2-r1
74.2-r1
icu
Alpine:v3.21
 before 74.2-r1
74.2-r1
icu
Alpine:v3.22
 before 76.1-r1
76.1-r1
icu
Alpine:v3.23
 before 76.1-r1
76.1-r1
icu
Alpine:v3.24
 before 76.1-r1
76.1-r1
icu
AlmaLinux:10
 before 74.2-5.el10_0
74.2-5.el10_0
libicu
AlmaLinux:10
 before 74.2-5.el10_0
74.2-5.el10_0
libicu-devel
AlmaLinux:10
 before 74.2-5.el10_0
74.2-5.el10_0
icu
AlmaLinux:9
 before 67.1-10.el9_6
67.1-10.el9_6
Show 143 moreShow less
Affected packages
PackageAffectedFixed
libicu
AlmaLinux:9
 before 67.1-10.el9_6
67.1-10.el9_6
libicu-devel
AlmaLinux:9
 before 67.1-10.el9_6
67.1-10.el9_6
icu
Azure Linux:2
 before 68.2.0.9-2
68.2.0.9-2
icu
Azure Linux:3
 before 72.1.0.3-2
72.1.0.3-2
nodejs
Azure Linux:3
 before 20.14.0-10
20.14.0-10
nodejs18
Azure Linux:2
 before 18.20.3-10
18.20.3-10
icu
Alpaquita:23
 72.1-r1 up to 72.1-r2
72.1-r2
icu
Alpaquita:25
 76.1-r0 up to 76.1-r1
76.1-r1
icu
Alpaquita:stream
 73.1-r2 up to 76.1-r1
76.1-r1
icu
BellSoft Hardened Containers:23
 72.1-r1 up to 72.1-r2
72.1-r2
icu
BellSoft Hardened Containers:25
 76.1-r0 up to 76.1-r1
76.1-r1
icu
BellSoft Hardened Containers:stream
 73.1-r2 up to 76.1-r1
76.1-r1
icu
TuxCare:AlmaLinux:9.2
 before 67.1-9.el9.tuxcare.els1
67.1-9.el9.tuxcare.els1
libicu
TuxCare:AlmaLinux:9.2
 before 67.1-9.el9.tuxcare.els1
67.1-9.el9.tuxcare.els1
libicu-devel
TuxCare:AlmaLinux:9.2
 before 67.1-9.el9.tuxcare.els1
67.1-9.el9.tuxcare.els1
libicu-doc
TuxCare:AlmaLinux:9.2
 before 67.1-9.el9.tuxcare.els1
67.1-9.el9.tuxcare.els1
icu
TuxCare:CentOS:7
 before 50.2-4.el7_7.tuxcare.els1
50.2-4.el7_7.tuxcare.els1
libicu
TuxCare:CentOS:7
 before 50.2-4.el7_7.tuxcare.els1
50.2-4.el7_7.tuxcare.els1
libicu-devel
TuxCare:CentOS:7
 before 50.2-4.el7_7.tuxcare.els1
50.2-4.el7_7.tuxcare.els1
libicu-doc
TuxCare:CentOS:7
 before 50.2-4.el7_7.tuxcare.els1
50.2-4.el7_7.tuxcare.els1
icu
TuxCare:OracleLinux:7
 before 50.2-4.el7_7.tuxcare.els1
50.2-4.el7_7.tuxcare.els1
libicu
TuxCare:OracleLinux:7
 before 50.2-4.el7_7.tuxcare.els1
50.2-4.el7_7.tuxcare.els1
libicu-devel
TuxCare:OracleLinux:7
 before 50.2-4.el7_7.tuxcare.els1
50.2-4.el7_7.tuxcare.els1
libicu-doc
TuxCare:OracleLinux:7
 before 50.2-4.el7_7.tuxcare.els1
50.2-4.el7_7.tuxcare.els1
icu-devtools
TuxCare:Ubuntu:18.04
 before 60.2-3ubuntu3.2+tuxcare.els1
60.2-3ubuntu3.2+tuxcare.els1
icu-doc
TuxCare:Ubuntu:18.04
 before 60.2-3ubuntu3.2+tuxcare.els1
60.2-3ubuntu3.2+tuxcare.els1
libicu-dev
TuxCare:Ubuntu:18.04
 before 60.2-3ubuntu3.2+tuxcare.els1
60.2-3ubuntu3.2+tuxcare.els1
libicu60
TuxCare:Ubuntu:18.04
 before 60.2-3ubuntu3.2+tuxcare.els1
60.2-3ubuntu3.2+tuxcare.els1
libiculx60
TuxCare:Ubuntu:18.04
 before 60.2-3ubuntu3.2+tuxcare.els1
60.2-3ubuntu3.2+tuxcare.els1
icu
Debian:12
 before 72.1-3+deb12u1, plus listed versions
72.1-3
72.1-3+deb12u1
icu
Debian:13
 before 76.1-4
76.1-4
icu
Debian:14
 before 76.1-4
76.1-4
icu
Debian:11
 before 67.1-7+deb11u1, plus listed versions
67.1-7
67.1-7+deb11u1
icu
Mageia:9
 before 73.2-1.2.mga9
73.2-1.2.mga9
icu
openEuler:24.03-LTS-SP2
 before 74.1-4.oe2403sp2
74.1-4.oe2403sp2
icu
openEuler:20.03-LTS-SP4
 before 62.1-8.oe2003sp4
62.1-8.oe2003sp4
icu
openEuler:22.03-LTS-SP3
 before 72.1-8.oe2203sp3
72.1-8.oe2203sp3
icu
openEuler:22.03-LTS-SP4
 before 72.1-8.oe2203sp4
72.1-8.oe2203sp4
icu
openEuler:24.03-LTS
 before 74.1-4.oe2403sp1
74.1-4.oe2403sp1
icu
openEuler:24.03-LTS-SP1
 before 74.1-4.oe2403sp1
74.1-4.oe2403sp1
icu
Red Hat:enterprise_linux:10.0
 before 0:74.2-5.el10_0
0:74.2-5.el10_0
icu-debuginfo
Red Hat:enterprise_linux:10.0
 before 0:74.2-5.el10_0
0:74.2-5.el10_0
icu-debugsource
Red Hat:enterprise_linux:10.0
 before 0:74.2-5.el10_0
0:74.2-5.el10_0
libicu-debuginfo
Red Hat:enterprise_linux:10.0
 before 0:74.2-5.el10_0
0:74.2-5.el10_0
libicu-devel
Red Hat:enterprise_linux:10.0
 before 0:74.2-5.el10_0
0:74.2-5.el10_0
libicu-devel-debuginfo
Red Hat:enterprise_linux:10.0
 before 0:74.2-5.el10_0
0:74.2-5.el10_0
libicu
Red Hat:enterprise_linux:10.0
 before 0:74.2-5.el10_0
0:74.2-5.el10_0
icu
Red Hat:enterprise_linux:9::appstream
 before 0:67.1-10.el9_6
0:67.1-10.el9_6
icu-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 0:67.1-10.el9_6
0:67.1-10.el9_6
icu-debugsource
Red Hat:enterprise_linux:9::appstream
 before 0:67.1-10.el9_6
0:67.1-10.el9_6
libicu-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 0:67.1-10.el9_6
0:67.1-10.el9_6
libicu-devel
Red Hat:enterprise_linux:9::appstream
 before 0:67.1-10.el9_6
0:67.1-10.el9_6
libicu-devel-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 0:67.1-10.el9_6
0:67.1-10.el9_6
icu
Red Hat:enterprise_linux:9::baseos
 before 0:67.1-10.el9_6
0:67.1-10.el9_6
icu-debuginfo
Red Hat:enterprise_linux:9::baseos
 before 0:67.1-10.el9_6
0:67.1-10.el9_6
icu-debugsource
Red Hat:enterprise_linux:9::baseos
 before 0:67.1-10.el9_6
0:67.1-10.el9_6
libicu
Red Hat:enterprise_linux:9::baseos
 before 0:67.1-10.el9_6
0:67.1-10.el9_6
libicu-debuginfo
Red Hat:enterprise_linux:9::baseos
 before 0:67.1-10.el9_6
0:67.1-10.el9_6
libicu-devel-debuginfo
Red Hat:enterprise_linux:9::baseos
 before 0:67.1-10.el9_6
0:67.1-10.el9_6
icu
Red Hat:rhel_e4s:9.2::appstream
 before 0:67.1-10.el9_2
0:67.1-10.el9_2
icu-debuginfo
Red Hat:rhel_e4s:9.2::appstream
 before 0:67.1-10.el9_2
0:67.1-10.el9_2
icu-debugsource
Red Hat:rhel_e4s:9.2::appstream
 before 0:67.1-10.el9_2
0:67.1-10.el9_2
libicu-debuginfo
Red Hat:rhel_e4s:9.2::appstream
 before 0:67.1-10.el9_2
0:67.1-10.el9_2
libicu-devel
Red Hat:rhel_e4s:9.2::appstream
 before 0:67.1-10.el9_2
0:67.1-10.el9_2
libicu-devel-debuginfo
Red Hat:rhel_e4s:9.2::appstream
 before 0:67.1-10.el9_2
0:67.1-10.el9_2
icu
Red Hat:rhel_e4s:9.2::baseos
 before 0:67.1-10.el9_2
0:67.1-10.el9_2
icu-debuginfo
Red Hat:rhel_e4s:9.2::baseos
 before 0:67.1-10.el9_2
0:67.1-10.el9_2
icu-debugsource
Red Hat:rhel_e4s:9.2::baseos
 before 0:67.1-10.el9_2
0:67.1-10.el9_2
libicu
Red Hat:rhel_e4s:9.2::baseos
 before 0:67.1-10.el9_2
0:67.1-10.el9_2
libicu-debuginfo
Red Hat:rhel_e4s:9.2::baseos
 before 0:67.1-10.el9_2
0:67.1-10.el9_2
libicu-devel-debuginfo
Red Hat:rhel_e4s:9.2::baseos
 before 0:67.1-10.el9_2
0:67.1-10.el9_2
icu
Red Hat:rhel_eus:9.4::appstream
 before 0:67.1-10.el9_4
0:67.1-10.el9_4
icu-debuginfo
Red Hat:rhel_eus:9.4::appstream
 before 0:67.1-10.el9_4
0:67.1-10.el9_4
icu-debugsource
Red Hat:rhel_eus:9.4::appstream
 before 0:67.1-10.el9_4
0:67.1-10.el9_4
libicu-debuginfo
Red Hat:rhel_eus:9.4::appstream
 before 0:67.1-10.el9_4
0:67.1-10.el9_4
libicu-devel
Red Hat:rhel_eus:9.4::appstream
 before 0:67.1-10.el9_4
0:67.1-10.el9_4
libicu-devel-debuginfo
Red Hat:rhel_eus:9.4::appstream
 before 0:67.1-10.el9_4
0:67.1-10.el9_4
icu
Red Hat:rhel_eus:9.4::baseos
 before 0:67.1-10.el9_4
0:67.1-10.el9_4
icu-debuginfo
Red Hat:rhel_eus:9.4::baseos
 before 0:67.1-10.el9_4
0:67.1-10.el9_4
icu-debugsource
Red Hat:rhel_eus:9.4::baseos
 before 0:67.1-10.el9_4
0:67.1-10.el9_4
libicu
Red Hat:rhel_eus:9.4::baseos
 before 0:67.1-10.el9_4
0:67.1-10.el9_4
libicu-debuginfo
Red Hat:rhel_eus:9.4::baseos
 before 0:67.1-10.el9_4
0:67.1-10.el9_4
libicu-devel-debuginfo
Red Hat:rhel_eus:9.4::baseos
 before 0:67.1-10.el9_4
0:67.1-10.el9_4
icu
Red Hat:rhel_e4s:9.0::appstream
 before 0:67.1-10.el9_0
0:67.1-10.el9_0
icu-debuginfo
Red Hat:rhel_e4s:9.0::appstream
 before 0:67.1-10.el9_0
0:67.1-10.el9_0
icu-debugsource
Red Hat:rhel_e4s:9.0::appstream
 before 0:67.1-10.el9_0
0:67.1-10.el9_0
libicu-debuginfo
Red Hat:rhel_e4s:9.0::appstream
 before 0:67.1-10.el9_0
0:67.1-10.el9_0
libicu-devel
Red Hat:rhel_e4s:9.0::appstream
 before 0:67.1-10.el9_0
0:67.1-10.el9_0
libicu-devel-debuginfo
Red Hat:rhel_e4s:9.0::appstream
 before 0:67.1-10.el9_0
0:67.1-10.el9_0
icu
Red Hat:rhel_e4s:9.0::baseos
 before 0:67.1-10.el9_0
0:67.1-10.el9_0
icu-debuginfo
Red Hat:rhel_e4s:9.0::baseos
 before 0:67.1-10.el9_0
0:67.1-10.el9_0
icu-debugsource
Red Hat:rhel_e4s:9.0::baseos
 before 0:67.1-10.el9_0
0:67.1-10.el9_0
libicu
Red Hat:rhel_e4s:9.0::baseos
 before 0:67.1-10.el9_0
0:67.1-10.el9_0
libicu-debuginfo
Red Hat:rhel_e4s:9.0::baseos
 before 0:67.1-10.el9_0
0:67.1-10.el9_0
libicu-devel-debuginfo
Red Hat:rhel_e4s:9.0::baseos
 before 0:67.1-10.el9_0
0:67.1-10.el9_0
icu
Rocky Linux:10
 before 0:74.2-5.el10_0
0:74.2-5.el10_0
icu
Rocky Linux:9
 before 0:67.1-10.el9_6
0:67.1-10.el9_6
icu
SUSE:Linux Enterprise Module for Basesystem 15 SP6
 before 60.2-150000.3.18.1
60.2-150000.3.18.1
icu
SUSE:Linux Enterprise Module for Basesystem 15 SP7
 before 60.2-150000.3.18.1
60.2-150000.3.18.1
icu
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
 before 60.2-150000.3.18.1
60.2-150000.3.18.1
icu
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
 before 60.2-150000.3.18.1
60.2-150000.3.18.1
icu
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
 before 60.2-150000.3.18.1
60.2-150000.3.18.1
icu
SUSE:Linux Enterprise Server 15 SP3-LTSS
 before 60.2-150000.3.18.1
60.2-150000.3.18.1
icu
SUSE:Linux Enterprise Server 15 SP4-LTSS
 before 60.2-150000.3.18.1
60.2-150000.3.18.1
icu
SUSE:Linux Enterprise Server 15 SP5-LTSS
 before 60.2-150000.3.18.1
60.2-150000.3.18.1
icu
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
 before 60.2-150000.3.18.1
60.2-150000.3.18.1
icu
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
 before 60.2-150000.3.18.1
60.2-150000.3.18.1
icu
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
 before 60.2-150000.3.18.1
60.2-150000.3.18.1
icu
SUSE:Enterprise Storage 7.1
 before 60.2-150000.3.18.1
60.2-150000.3.18.1
icu
SUSE:Linux Enterprise Micro 5.3
From an advisory covering 2 CVEs
 before 65.1-150200.4.15.1
65.1-150200.4.15.1
icu
SUSE:Linux Enterprise Micro 5.4
From an advisory covering 2 CVEs
 before 65.1-150200.4.15.1
65.1-150200.4.15.1
icu
SUSE:Linux Enterprise Module for Basesystem 15 SP6
From an advisory covering 2 CVEs
 before 65.1-150200.4.15.1
65.1-150200.4.15.1
icu
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 2 CVEs
 before 65.1-150200.4.15.1
65.1-150200.4.15.1
icu
SUSE:Linux Enterprise Module for Package Hub 15 SP6
From an advisory covering 2 CVEs
 before 65.1-150200.4.15.1
65.1-150200.4.15.1
icu
SUSE:Linux Enterprise Module for Package Hub 15 SP7
From an advisory covering 2 CVEs
 before 65.1-150200.4.15.1
65.1-150200.4.15.1
icu
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
From an advisory covering 2 CVEs
 before 65.1-150200.4.15.1
65.1-150200.4.15.1
icu
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 2 CVEs
 before 65.1-150200.4.15.1
65.1-150200.4.15.1
icu
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 2 CVEs
 before 65.1-150200.4.15.1
65.1-150200.4.15.1
icu
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
From an advisory covering 2 CVEs
 before 65.1-150200.4.15.1
65.1-150200.4.15.1
icu
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
From an advisory covering 2 CVEs
 before 65.1-150200.4.15.1
65.1-150200.4.15.1
icu
SUSE:Linux Enterprise Server 15 SP3-LTSS
From an advisory covering 2 CVEs
 before 65.1-150200.4.15.1
65.1-150200.4.15.1
icu
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 2 CVEs
 before 65.1-150200.4.15.1
65.1-150200.4.15.1
icu
SUSE:Linux Enterprise Server 15 SP5-LTSS
From an advisory covering 2 CVEs
 before 65.1-150200.4.15.1
65.1-150200.4.15.1
icu
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
From an advisory covering 2 CVEs
 before 65.1-150200.4.15.1
65.1-150200.4.15.1
icu
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
From an advisory covering 2 CVEs
 before 65.1-150200.4.15.1
65.1-150200.4.15.1
icu
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
From an advisory covering 2 CVEs
 before 65.1-150200.4.15.1
65.1-150200.4.15.1
icu
SUSE:Manager Proxy 4.3
From an advisory covering 2 CVEs
 before 65.1-150200.4.15.1
65.1-150200.4.15.1
icu
SUSE:Manager Server 4.3
From an advisory covering 2 CVEs
 before 65.1-150200.4.15.1
65.1-150200.4.15.1
icu
SUSE:Linux Enterprise Micro 5.1
From an advisory covering 2 CVEs
 before 65.1-150200.4.15.1
65.1-150200.4.15.1
icu
SUSE:Linux Enterprise Micro 5.2
From an advisory covering 2 CVEs
 before 65.1-150200.4.15.1
65.1-150200.4.15.1
icu
SUSE:Enterprise Storage 7.1
From an advisory covering 2 CVEs
 before 65.1-150200.4.15.1
65.1-150200.4.15.1
icu
openSUSE:Leap 15.6
From an advisory covering 2 CVEs
 before 65.1-150200.4.15.1
65.1-150200.4.15.1
icu
SUSE:Linux Enterprise Server 12 SP5-LTSS
 before 52.1-8.16.1
52.1-8.16.1
icu
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5
 before 52.1-8.16.1
52.1-8.16.1
icu
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
4.8.1.1-12ubuntu24.8.1.1-13+nmu14.8.1.1-13+nmu1ubuntu152.1-352.1-3ubuntu0.2
Show 8 moreShow less
52.1-3ubuntu0.352.1-3ubuntu0.452.1-3ubuntu0.552.1-3ubuntu0.652.1-3ubuntu0.752.1-3ubuntu0.852.1-3ubuntu0.8+esm152.1-3ubuntu0.8+esm2
 None known
icu
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
55.1-4ubuntu155.1-6ubuntu155.1-755.1-7ubuntu0.155.1-7ubuntu0.2
Show 4 moreShow less
55.1-7ubuntu0.355.1-7ubuntu0.455.1-7ubuntu0.555.1-7ubuntu0.5+esm1
 None known
icu
Ubuntu:18.04:LTS
 All versions, plus listed versions
57.1-659.1-3ubuntu160.1-1ubuntu260.2-1ubuntu160.2-3ubuntu160.2-3ubuntu360.2-3ubuntu3.160.2-3ubuntu3.2
 None known
icu
Ubuntu:20.04:LTS
 All versions, plus listed versions
63.2-265.1-1ubuntu266.1-2ubuntu266.1-2ubuntu2.1
 None known
icu
Ubuntu:22.04:LTS
 All versions, plus listed versions
67.1-7ubuntu170.1-2
 None known
icu
Ubuntu:24.04:LTS
 All versions, plus listed versions
72.1-3ubuntu372.1-4ubuntu174.2-1ubuntu174.2-1ubuntu374.2-1ubuntu3.1
 None known
icu
Ubuntu:25.10
 All versions, plus listed versions
76.1-1ubuntu276.1-4ubuntu176.1-4ubuntu2
 None known
icu
Ubuntu:26.04:LTS
 All versions, plus listed versions
76.1-4ubuntu278.1-1ubuntu178.1-2ubuntu278.2-1ubuntu178.2-2ubuntu1
 None known
icu
openSUSE:Tumbleweed
 before 77.1-3.1
77.1-3.1

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
PoC in GitHubberkley4/icu-74-debian2025-06-25

History

History
RecordedChangedSources
affectedEUVD, NVD, OSV
factsCVE List, OSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV, PoC in GitHub

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2025-5222 is a high vulnerability (CVSS 7.0) in Red Hat Enterprise Linux 10, published May 27, 2025. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 0.44%, the 38th percentile. Fixed in icu 74.1-r1.

References

Show 51 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open