OSV-2020-867
Heap-buffer-overflow in icu_64::CollationIterator::appendCEsFromCE32
No scoreFix available
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15613
Crash type: Heap-buffer-overflow READ 4
Crash state:
icu_64::CollationIterator::appendCEsFromCE32
icu_64::DataBuilderCollationIterator::fetchCEs
icu_64::CollationDataBuilder::getCEs
What each source reports
OSV No score
Heap-buffer-overflow in icu_64::CollationIterator::appendCEsFromCE32
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15613
Crash type: Heap-buffer-overflow READ 4
Crash state:
icu_64::CollationIterator::appendCEsFromCE32
icu_64::DataBuilderCollationIterator::fetchCEs
icu_64::CollationDataBuilder::getCEs
- Record
OSV-2020-867- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
icuOSS-Fuzz |
Listed versions, plus commit ranges cldr/2020-09-22cldr/2020-10-21cldr/2021-02-17cldr/2021-03-09cldr/2021-06-15 Show 32 moreShow lesscldr/2021-08-11cldr/2021-08-25cldr/2021-09-15cldr/2021-09-29cldr/2021-10-19cldr/2021-10-25cldr/2022-02-08cldr/2022-02-22cldr/2022-02-23cldr/2022-03-30cldr/2022-03-31release-65-1release-65-rcrelease-66-1release-66-previewrelease-66-rcrelease-67-1release-67-rcrelease-68-1release-68-2release-68-alpharelease-68-rcrelease-69-1release-69-rcrelease-70-1release-70-rcrelease-71-rcrelease-71-1icu4x/2022-06-30/71.xicu4x/2022-07-18/71.xicu4x/2022-07-25/71.xicu4x/2022-08-17/71.x |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
OSV-2020-867 is a vulnerability with no CVSS score yet in icu, published July 14, 2020. No source lists public exploit code. A source reports a fix.