Every CVE Search/ Get API key

OSV-2021-1236

UNKNOWN READ in icu_70::UCharsTrie::branchNext

No scoreFix available

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38390

Crash type: UNKNOWN READ
Crash state:
icu_70::UCharsTrie::branchNext
icu_70::UCharsTrie::firstForCodePoint
icu_70::CollationIterator::nextCE32FromContraction

What each source reports

OSV No score

UNKNOWN READ in icu_70::UCharsTrie::branchNext

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38390

Crash type: UNKNOWN READ
Crash state:
icu_70::UCharsTrie::branchNext
icu_70::UCharsTrie::firstForCodePoint
icu_70::CollationIterator::nextCE32FromContraction
Record
OSV-2021-1236
Updated
2026-11-02

Affected packages

Affected packages
PackageAffectedFixed
icu
OSS-Fuzz
Listed versions, plus commit ranges
cldr/2021-09-15cldr/2021-09-29cldr/2021-10-19cldr/2021-10-25cldr/2022-02-08
Show 12 moreShow less
cldr/2022-02-22cldr/2022-02-23cldr/2022-03-30cldr/2022-03-31release-70-1release-70-rcrelease-71-rcrelease-71-1icu4x/2022-06-30/71.xicu4x/2022-07-18/71.xicu4x/2022-07-25/71.xicu4x/2022-08-17/71.x
None known

History

History
RecordedChangedSources
first indexedOSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

OSV-2021-1236 is a vulnerability with no CVSS score yet in icu, published September 12, 2021. No source lists public exploit code. A source reports a fix.

References

MoveEnter Open