{"id":"CVE-2025-5222","aliases":["ALPINE-CVE-2025-5222","ALSA-2025:11888","ALSA-2025:12083","AZL-66147","AZL-66156","AZL-69692","AZL-69706","BELL-CVE-2025-5222","CLSA-2025-1762539763","CLSA-2026-1774269500","CLSA-2026-1774273758","CLSA-2026-1787152014","DEBIAN-CVE-2025-5222","DLA-4217-1","DSA-5951-1","EUVD-2025-16306","GHSA-wv79-2fc4-v4hj","MGASA-2025-0249","OESA-2025-1982","RHSA-2025:11888","RHSA-2025:12083","RHSA-2025:12331","RHSA-2025:12332","RHSA-2025:12333","RLSA-2025:11888","RLSA-2025:12083","SUSE-SU-2025:02059-1","SUSE-SU-2025:02079-1","SUSE-SU-2025:02216-1","UBUNTU-CVE-2025-5222","openSUSE-SU-2025:15230-1"],"status":"published","title":"Icu: stack buffer overflow in the srbroot::addtag function","description":"A stack buffer overflow was found in Internationl components for unicode (ICU ). While running the genrb binary, the 'subtag' struct overflowed at the SRBRoot::addTag function. This issue may lead to memory corruption and local arbitrary code execution.","severity":{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00439,"percentile":0.38455,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-120"],"published":"2025-05-27T05:59:15.654003Z","modified":"2026-11-09T12:49:26Z","exploits":[{"source":"pocgithub","id":"berkley4/icu-74-debian","title":"berkley4/icu-74-debian","date":"2025-06-25","url":"https://github.com/berkley4/icu-74-debian"}],"fixes":[{"ecosystem":"Alpine:v3.19","package":"icu","fixed_in":["74.1-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"icu","fixed_in":["74.2-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"icu","fixed_in":["74.2-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"icu","fixed_in":["76.1-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"icu","fixed_in":["76.1-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"icu","fixed_in":["76.1-r1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"icu","fixed_in":["74.2-5.el10_0"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"libicu","fixed_in":["74.2-5.el10_0"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"libicu-devel","fixed_in":["74.2-5.el10_0"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"icu","fixed_in":["67.1-10.el9_6"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"libicu","fixed_in":["67.1-10.el9_6"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"libicu-devel","fixed_in":["67.1-10.el9_6"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"icu","fixed_in":["68.2.0.9-2"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"icu","fixed_in":["72.1.0.3-2"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"nodejs","fixed_in":["20.14.0-10"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"nodejs18","fixed_in":["18.20.3-10"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"icu","fixed_in":["72.1-r2"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"icu","fixed_in":["76.1-r1"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"icu","fixed_in":["76.1-r1"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:23","package":"icu","fixed_in":["72.1-r2"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:25","package":"icu","fixed_in":["76.1-r1"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:stream","package":"icu","fixed_in":["76.1-r1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"icu","fixed_in":["67.1-9.el9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"libicu","fixed_in":["67.1-9.el9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"libicu-devel","fixed_in":["67.1-9.el9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"libicu-doc","fixed_in":["67.1-9.el9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"icu","fixed_in":["50.2-4.el7_7.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"libicu","fixed_in":["50.2-4.el7_7.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"libicu-devel","fixed_in":["50.2-4.el7_7.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"libicu-doc","fixed_in":["50.2-4.el7_7.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"icu","fixed_in":["50.2-4.el7_7.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"libicu","fixed_in":["50.2-4.el7_7.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"libicu-devel","fixed_in":["50.2-4.el7_7.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"libicu-doc","fixed_in":["50.2-4.el7_7.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"icu-devtools","fixed_in":["60.2-3ubuntu3.2+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"icu-doc","fixed_in":["60.2-3ubuntu3.2+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libicu-dev","fixed_in":["60.2-3ubuntu3.2+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libicu60","fixed_in":["60.2-3ubuntu3.2+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libiculx60","fixed_in":["60.2-3ubuntu3.2+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"icu","fixed_in":["72.1-3+deb12u1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"icu","fixed_in":["76.1-4"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"icu","fixed_in":["76.1-4"],"sources":["osv"]},{"ecosystem":"Debian:11","package":"icu","fixed_in":["67.1-7+deb11u1"],"sources":["osv"]},{"ecosystem":"Mageia:9","package":"icu","fixed_in":["73.2-1.2.mga9"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP2","package":"icu","fixed_in":["74.1-4.oe2403sp2"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP4","package":"icu","fixed_in":["62.1-8.oe2003sp4"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP3","package":"icu","fixed_in":["72.1-8.oe2203sp3"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP4","package":"icu","fixed_in":["72.1-8.oe2203sp4"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS","package":"icu","fixed_in":["74.1-4.oe2403sp1"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP1","package":"icu","fixed_in":["74.1-4.oe2403sp1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.0","package":"icu","fixed_in":["0:74.2-5.el10_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.0","package":"icu-debuginfo","fixed_in":["0:74.2-5.el10_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.0","package":"icu-debugsource","fixed_in":["0:74.2-5.el10_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.0","package":"libicu-debuginfo","fixed_in":["0:74.2-5.el10_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.0","package":"libicu-devel","fixed_in":["0:74.2-5.el10_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.0","package":"libicu-devel-debuginfo","fixed_in":["0:74.2-5.el10_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.0","package":"libicu","fixed_in":["0:74.2-5.el10_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"icu","fixed_in":["0:67.1-10.el9_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"icu-debuginfo","fixed_in":["0:67.1-10.el9_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"icu-debugsource","fixed_in":["0:67.1-10.el9_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libicu-debuginfo","fixed_in":["0:67.1-10.el9_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libicu-devel","fixed_in":["0:67.1-10.el9_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libicu-devel-debuginfo","fixed_in":["0:67.1-10.el9_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"icu","fixed_in":["0:67.1-10.el9_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"icu-debuginfo","fixed_in":["0:67.1-10.el9_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"icu-debugsource","fixed_in":["0:67.1-10.el9_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"libicu","fixed_in":["0:67.1-10.el9_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"libicu-debuginfo","fixed_in":["0:67.1-10.el9_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"libicu-devel-debuginfo","fixed_in":["0:67.1-10.el9_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"icu","fixed_in":["0:67.1-10.el9_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"icu-debuginfo","fixed_in":["0:67.1-10.el9_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"icu-debugsource","fixed_in":["0:67.1-10.el9_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"libicu-debuginfo","fixed_in":["0:67.1-10.el9_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"libicu-devel","fixed_in":["0:67.1-10.el9_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"libicu-devel-debuginfo","fixed_in":["0:67.1-10.el9_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.2::baseos","package":"icu","fixed_in":["0:67.1-10.el9_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.2::baseos","package":"icu-debuginfo","fixed_in":["0:67.1-10.el9_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.2::baseos","package":"icu-debugsource","fixed_in":["0:67.1-10.el9_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.2::baseos","package":"libicu","fixed_in":["0:67.1-10.el9_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.2::baseos","package":"libicu-debuginfo","fixed_in":["0:67.1-10.el9_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.2::baseos","package":"libicu-devel-debuginfo","fixed_in":["0:67.1-10.el9_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"icu","fixed_in":["0:67.1-10.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"icu-debuginfo","fixed_in":["0:67.1-10.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"icu-debugsource","fixed_in":["0:67.1-10.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"libicu-debuginfo","fixed_in":["0:67.1-10.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"libicu-devel","fixed_in":["0:67.1-10.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"libicu-devel-debuginfo","fixed_in":["0:67.1-10.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::baseos","package":"icu","fixed_in":["0:67.1-10.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::baseos","package":"icu-debuginfo","fixed_in":["0:67.1-10.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::baseos","package":"icu-debugsource","fixed_in":["0:67.1-10.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::baseos","package":"libicu","fixed_in":["0:67.1-10.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::baseos","package":"libicu-debuginfo","fixed_in":["0:67.1-10.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::baseos","package":"libicu-devel-debuginfo","fixed_in":["0:67.1-10.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"icu","fixed_in":["0:67.1-10.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"icu-debuginfo","fixed_in":["0:67.1-10.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"icu-debugsource","fixed_in":["0:67.1-10.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"libicu-debuginfo","fixed_in":["0:67.1-10.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"libicu-devel","fixed_in":["0:67.1-10.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"libicu-devel-debuginfo","fixed_in":["0:67.1-10.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::baseos","package":"icu","fixed_in":["0:67.1-10.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::baseos","package":"icu-debuginfo","fixed_in":["0:67.1-10.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::baseos","package":"icu-debugsource","fixed_in":["0:67.1-10.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::baseos","package":"libicu","fixed_in":["0:67.1-10.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::baseos","package":"libicu-debuginfo","fixed_in":["0:67.1-10.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::baseos","package":"libicu-devel-debuginfo","fixed_in":["0:67.1-10.el9_0"],"sources":["osv"]},{"ecosystem":"Rocky Linux:10","package":"icu","fixed_in":["0:74.2-5.el10_0"],"sources":["osv"]},{"ecosystem":"Rocky Linux:9","package":"icu","fixed_in":["0:67.1-10.el9_6"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"icu","fixed_in":["60.2-150000.3.18.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"icu","fixed_in":["60.2-150000.3.18.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"icu","fixed_in":["60.2-150000.3.18.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"icu","fixed_in":["60.2-150000.3.18.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"icu","fixed_in":["60.2-150000.3.18.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"icu","fixed_in":["60.2-150000.3.18.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"icu","fixed_in":["60.2-150000.3.18.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"icu","fixed_in":["60.2-150000.3.18.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"icu","fixed_in":["60.2-150000.3.18.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"icu","fixed_in":["60.2-150000.3.18.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"icu","fixed_in":["60.2-150000.3.18.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 7.1","package":"icu","fixed_in":["60.2-150000.3.18.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"icu","fixed_in":["52.1-8.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"icu","fixed_in":["52.1-8.16.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"icu","fixed_in":["77.1-3.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.19","package":"icu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"74.1-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"icu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"74.2-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"icu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"74.2-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"icu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"76.1-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"icu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"76.1-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"icu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"76.1-r1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"icu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"74.2-5.el10_0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"libicu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"74.2-5.el10_0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"libicu-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"74.2-5.el10_0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"icu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"67.1-10.el9_6"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"libicu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"67.1-10.el9_6"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"libicu-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"67.1-10.el9_6"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"icu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"68.2.0.9-2"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"icu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"72.1.0.3-2"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"nodejs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20.14.0-10"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"nodejs18","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.20.3-10"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"icu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"72.1-r1"},{"fixed":"72.1-r2"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"icu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"76.1-r0"},{"fixed":"76.1-r1"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"icu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"73.1-r2"},{"fixed":"76.1-r1"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"icu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"72.1-r1"},{"fixed":"72.1-r2"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:25","package":"icu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"76.1-r0"},{"fixed":"76.1-r1"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"icu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"73.1-r2"},{"fixed":"76.1-r1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"icu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"67.1-9.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"libicu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"67.1-9.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"libicu-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"67.1-9.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"libicu-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"67.1-9.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"icu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"50.2-4.el7_7.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"libicu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"50.2-4.el7_7.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"libicu-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"50.2-4.el7_7.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"libicu-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"50.2-4.el7_7.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"icu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"50.2-4.el7_7.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"libicu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"50.2-4.el7_7.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"libicu-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"50.2-4.el7_7.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"libicu-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"50.2-4.el7_7.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"icu-devtools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"60.2-3ubuntu3.2+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"icu-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"60.2-3ubuntu3.2+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libicu-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"60.2-3ubuntu3.2+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libicu60","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"60.2-3ubuntu3.2+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libiculx60","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"60.2-3ubuntu3.2+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"icu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"72.1-3+deb12u1"}]}],"versions":["72.1-3"]},{"source":"osv","ecosystem":"Debian:13","package":"icu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"76.1-4"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"icu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"76.1-4"}]}]},{"source":"osv","ecosystem":"Debian:11","package":"icu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"67.1-7+deb11u1"}]}],"versions":["67.1-7"]},{"source":"osv","ecosystem":"Debian:12","package":"icu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"72.1-3+deb12u1"}]}],"versions":["72.1-3"]},{"source":"osv","ecosystem":"Mageia:9","package":"icu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"73.2-1.2.mga9"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP2","package":"icu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"74.1-4.oe2403sp2"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"icu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"62.1-8.oe2003sp4"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP3","package":"icu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"72.1-8.oe2203sp3"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"icu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"72.1-8.oe2203sp4"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"icu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"74.1-4.oe2403sp1"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"icu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"74.1-4.oe2403sp1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"icu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:74.2-5.el10_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"icu-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:74.2-5.el10_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"icu-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:74.2-5.el10_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"libicu-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:74.2-5.el10_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"libicu-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:74.2-5.el10_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"libicu-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:74.2-5.el10_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"libicu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:74.2-5.el10_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"icu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:67.1-10.el9_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"icu-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:67.1-10.el9_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"icu-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:67.1-10.el9_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libicu-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:67.1-10.el9_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libicu-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:67.1-10.el9_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libicu-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:67.1-10.el9_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"icu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:67.1-10.el9_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"icu-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:67.1-10.el9_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"icu-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:67.1-10.el9_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"libicu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:67.1-10.el9_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"libicu-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:67.1-10.el9_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"libicu-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:67.1-10.el9_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"icu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:67.1-10.el9_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"icu-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:67.1-10.el9_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"icu-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:67.1-10.el9_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"libicu-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:67.1-10.el9_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"libicu-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:67.1-10.el9_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"libicu-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:67.1-10.el9_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::baseos","package":"icu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:67.1-10.el9_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::baseos","package":"icu-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:67.1-10.el9_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::baseos","package":"icu-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:67.1-10.el9_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::baseos","package":"libicu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:67.1-10.el9_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::baseos","package":"libicu-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:67.1-10.el9_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::baseos","package":"libicu-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:67.1-10.el9_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"icu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:67.1-10.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"icu-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:67.1-10.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"icu-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:67.1-10.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"libicu-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:67.1-10.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"libicu-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:67.1-10.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"libicu-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:67.1-10.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::baseos","package":"icu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:67.1-10.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::baseos","package":"icu-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:67.1-10.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::baseos","package":"icu-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:67.1-10.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::baseos","package":"libicu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:67.1-10.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::baseos","package":"libicu-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:67.1-10.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::baseos","package":"libicu-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:67.1-10.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"icu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:67.1-10.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"icu-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:67.1-10.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"icu-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:67.1-10.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"libicu-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:67.1-10.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"libicu-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:67.1-10.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"libicu-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:67.1-10.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::baseos","package":"icu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:67.1-10.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::baseos","package":"icu-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:67.1-10.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::baseos","package":"icu-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:67.1-10.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::baseos","package":"libicu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:67.1-10.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::baseos","package":"libicu-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:67.1-10.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::baseos","package":"libicu-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:67.1-10.el9_0"}]}]},{"source":"osv","ecosystem":"Rocky Linux:10","package":"icu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:74.2-5.el10_0"}]}]},{"source":"osv","ecosystem":"Rocky Linux:9","package":"icu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:67.1-10.el9_6"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"icu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"60.2-150000.3.18.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"icu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"60.2-150000.3.18.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"icu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"60.2-150000.3.18.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"icu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"60.2-150000.3.18.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"icu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"60.2-150000.3.18.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"icu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"60.2-150000.3.18.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"icu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"60.2-150000.3.18.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"icu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"60.2-150000.3.18.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"icu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"60.2-150000.3.18.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"icu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"60.2-150000.3.18.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"icu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"60.2-150000.3.18.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"icu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"60.2-150000.3.18.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"icu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"65.1-150200.4.15.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"icu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"65.1-150200.4.15.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"icu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"65.1-150200.4.15.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"icu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"65.1-150200.4.15.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP6","package":"icu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"65.1-150200.4.15.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP7","package":"icu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"65.1-150200.4.15.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"icu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"65.1-150200.4.15.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"icu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"65.1-150200.4.15.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"icu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"65.1-150200.4.15.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"icu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"65.1-150200.4.15.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"icu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"65.1-150200.4.15.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"icu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"65.1-150200.4.15.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"icu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"65.1-150200.4.15.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"icu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"65.1-150200.4.15.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"icu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"65.1-150200.4.15.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"icu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"65.1-150200.4.15.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"icu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"65.1-150200.4.15.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.3","package":"icu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"65.1-150200.4.15.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Server 4.3","package":"icu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"65.1-150200.4.15.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"icu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"65.1-150200.4.15.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"icu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"65.1-150200.4.15.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"icu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"65.1-150200.4.15.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"icu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"65.1-150200.4.15.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"icu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.1-8.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"icu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.1-8.16.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"icu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.8.1.1-12ubuntu2","4.8.1.1-13+nmu1","4.8.1.1-13+nmu1ubuntu1","52.1-3","52.1-3ubuntu0.2","52.1-3ubuntu0.3","52.1-3ubuntu0.4","52.1-3ubuntu0.5","52.1-3ubuntu0.6","52.1-3ubuntu0.7","52.1-3ubuntu0.8","52.1-3ubuntu0.8+esm1","52.1-3ubuntu0.8+esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"icu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["55.1-4ubuntu1","55.1-6ubuntu1","55.1-7","55.1-7ubuntu0.1","55.1-7ubuntu0.2","55.1-7ubuntu0.3","55.1-7ubuntu0.4","55.1-7ubuntu0.5","55.1-7ubuntu0.5+esm1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"icu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["57.1-6","59.1-3ubuntu1","60.1-1ubuntu2","60.2-1ubuntu1","60.2-3ubuntu1","60.2-3ubuntu3","60.2-3ubuntu3.1","60.2-3ubuntu3.2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"icu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["63.2-2","65.1-1ubuntu2","66.1-2ubuntu2","66.1-2ubuntu2.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"icu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["67.1-7ubuntu1","70.1-2"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"icu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["72.1-3ubuntu3","72.1-4ubuntu1","74.2-1ubuntu1","74.2-1ubuntu3","74.2-1ubuntu3.1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"icu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["76.1-1ubuntu2","76.1-4ubuntu1","76.1-4ubuntu2"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"icu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"77.1-3.1"}]}]}],"products":[{"vendor":"red hat","product":"red hat enterprise linux 10"},{"vendor":"red hat","product":"red hat enterprise linux 6"},{"vendor":"red hat","product":"red hat enterprise linux 7"},{"vendor":"red hat","product":"red hat enterprise linux 8"},{"vendor":"red hat","product":"red hat enterprise linux 9"},{"vendor":"red hat","product":"red hat enterprise linux 9.0 update services for sap solutions"},{"vendor":"red hat","product":"red hat enterprise linux 9.2 update services for sap solutions"},{"vendor":"red hat","product":"red hat enterprise linux 9.4 extended update support"},{"vendor":"red hat","product":"red hat openshift container platform 4"},{"vendor":"red hat","product":"red hat openshift container platform 4.13"},{"vendor":"red hat","product":"red hat openshift container platform 4.14"},{"vendor":"red hat","product":"red hat openshift container platform 4.15"},{"vendor":"red hat","product":"red hat openshift container platform 4.16"},{"vendor":"red hat","product":"red hat openshift container platform 4.17"},{"vendor":"red hat","product":"red hat openshift container platform 4.18"},{"vendor":"red hat","product":"red hat openshift container platform 4.19"},{"vendor":"red hat","product":"red hat openshift container platform 4.20"},{"vendor":"siemens","product":"sidis secured smartplug"},{"vendor":"unicode","product":"international_components_for_unicode"}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2025:11888","tags":["vendor-advisory","x_refsource_REDHAT","Vendor Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:12083","tags":["vendor-advisory","x_refsource_REDHAT","Vendor Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:12331","tags":["vendor-advisory","x_refsource_REDHAT","Vendor Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:12332","tags":["vendor-advisory","x_refsource_REDHAT","Vendor Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:12333","tags":["vendor-advisory","x_refsource_REDHAT","Vendor Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:54544","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:54553","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:54581","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:56786","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:56853","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:56911","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:60019","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:65839","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-5222","tags":["vdb-entry","x_refsource_REDHAT","Vendor Advisory","report","advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2368600","tags":["issue-tracking","x_refsource_REDHAT","Issue Tracking","report"]},{"url":"https://unicode-org.atlassian.net/jira/software/c/projects/ICU/issues/ICU-22957","tags":["web","article"]},{"url":"https://lists.debian.org/debian-lts-announce/2025/06/msg00015.html","tags":["Mailing List","web"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-585531.html","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-5222","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-wv79-2fc4-v4hj"},{"url":"https://security.alpinelinux.org/vuln/CVE-2025-5222","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/2368600","tags":["report"]},{"url":"https://errata.almalinux.org/10/ALSA-2025-11888.html","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2025-12083.html","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2025-5222","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2025-1762539763.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos7els/CLSA-2026-1774269500.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/oraclelinux7els/CLSA-2026-1774273758.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/ubuntu18.04els/CLSA-2026-1787152014.html","tags":["advisory"]},{"url":"https://access.redhat.com/downloads/content/package-browser/","tags":["web"]},{"url":"https://unicode-org.atlassian.net/","tags":["web"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/5xxx/CVE-2025-5222.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2025-5222","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2025-0249.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=34442","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/KB5WTHV4QSRRUVG6KMSV4Z2FIQKSWR54/","tags":["web"]},{"url":"https://lists.debian.org/debian-security-announce/2025/msg00115.html","tags":["web"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1982","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_11888.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-5222","tags":["advisory","report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_12083.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_12331.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_12332.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_12333.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2025:11888","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2025:12083","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202502059-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1243721","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-5222","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202502079-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1161007","tags":["report"]},{"url":"https://bugzilla.suse.com/1167603","tags":["report"]},{"url":"https://bugzilla.suse.com/1193951","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2020-21913","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202502216-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2025-5222","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2025-5222","title":"Icu: stack buffer overflow in the srbroot::addtag function","description":"A stack buffer overflow was found in Internationl components for unicode (ICU ). While running the genrb binary, the 'subtag' struct overflowed at the SRBRoot::addTag function. This issue may lead to memory corruption and local arbitrary code execution.","status":"published","published":"2025-05-27T20:51:50.958Z","modified":"2026-11-05T15:36:35.318Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-120"],"updated_at":"2026-11-05T16:36:33.176634Z"}],"euvd":[{"id":"EUVD-2025-16306","description":"A stack buffer overflow was found in Internationl components for unicode (ICU ). While running the genrb binary, the 'subtag' struct overflowed at the SRBRoot::addTag function. This issue may lead to memory corruption and local arbitrary code execution.","status":"published","published":"2025-05-27T20:51:50Z","modified":"2026-11-05T15:36:35Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-05T18:00:59.460287Z"}],"ghsa":[{"id":"GHSA-wv79-2fc4-v4hj","title":"A stack buffer overflow was found in Internationl components for unicode (ICU ). While running...","description":"A stack buffer overflow was found in Internationl components for unicode (ICU ). While running the genrb binary, the 'subtag' struct overflowed at the SRBRoot::addTag function. This issue may lead to memory corruption and local arbitrary code execution.","status":"published","published":"2025-05-27T21:32:17Z","modified":"2026-09-17T21:31:16Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T15:12:08.779152Z"}],"nvd":[{"id":"CVE-2025-5222","description":"A stack buffer overflow was found in Internationl components for unicode (ICU ). While running the genrb binary, the 'subtag' struct overflowed at the SRBRoot::addTag function. This issue may lead to memory corruption and local arbitrary code execution.","status":"published","published":"2025-05-27T21:15:23.03Z","modified":"2026-11-05T16:17:20.427Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-120"],"updated_at":"2026-11-05T19:55:50.758755Z"}],"osv":[{"id":"ALPINE-CVE-2025-5222","description":"A stack buffer overflow was found in Internationl components for unicode (ICU ). While running the genrb binary, the 'subtag' struct overflowed at the SRBRoot::addTag function. This issue may lead to memory corruption and local arbitrary code execution.","status":"published","published":"2025-05-27T21:15:23.03Z","modified":"2026-08-27T22:18:02.989813443Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:27:50.269992Z"},{"id":"BELL-CVE-2025-5222","status":"published","published":"2025-05-27T05:59:15.654003Z","modified":"2026-02-18T07:38:18.635799Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:22.495824Z"},{"id":"CVE-2025-5222","title":"Icu: stack buffer overflow in the srbroot::addtag function","description":"A stack buffer overflow was found in Internationl components for unicode (ICU ). While running the genrb binary, the 'subtag' struct overflowed at the SRBRoot::addTag function. This issue may lead to memory corruption and local arbitrary code execution.","status":"published","published":"2025-05-27T20:51:50.958Z","modified":"2026-11-07T07:02:54.128560371Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-120"],"updated_at":"2026-11-07T03:07:57.2097Z"},{"id":"DEBIAN-CVE-2025-5222","description":"A stack buffer overflow was found in Internationl components for unicode (ICU ). While running the genrb binary, the 'subtag' struct overflowed at the SRBRoot::addTag function. This issue may lead to memory corruption and local arbitrary code execution.","status":"published","published":"2025-05-27T21:15:23.03Z","modified":"2026-10-23T17:47:48.906922274Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:47.378563Z"},{"id":"OESA-2025-1982","title":"icu security update","description":"Tools and utilities for developing with icu.\r\n\r\nSecurity Fix(es):\n\nA stack buffer overflow was found in Internationl components for unicode (ICU ). While running the genrb binary, the \u0026apos;subtag\u0026apos; struct overflowed at the SRBRoot::addTag function. This issue may lead to memory corruption and local arbitrary code execution.(CVE-2025-5222)","status":"published","published":"2025-08-08T11:09:04Z","modified":"2026-08-18T01:18:57.172525191Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:43.127925Z"},{"id":"RHSA-2025:11888","title":"Red Hat Security Advisory: icu security update","status":"published","published":"2025-07-29T10:07:29Z","modified":"2026-10-09T10:13:50Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:15.599955Z"},{"id":"RHSA-2025:12083","title":"Red Hat Security Advisory: icu security update","status":"published","published":"2025-07-30T10:03:22Z","modified":"2026-10-09T10:13:56Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:15.599955Z"},{"id":"RHSA-2025:12331","title":"Red Hat Security Advisory: icu security update","status":"published","published":"2025-07-31T10:09:16Z","modified":"2026-10-09T10:14:02Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:15.599955Z"},{"id":"RHSA-2025:12332","title":"Red Hat Security Advisory: icu security update","status":"published","published":"2025-07-31T10:09:16Z","modified":"2026-10-09T10:14:02Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:15.599955Z"},{"id":"RHSA-2025:12333","title":"Red Hat Security Advisory: icu security update","status":"published","published":"2025-07-31T10:09:18Z","modified":"2026-10-09T10:14:03Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:15.599955Z"},{"id":"RLSA-2025:11888","title":"Moderate: icu security update","description":"The International Components for Unicode (ICU) library provides robust and full-featured Unicode services.\n\nSecurity Fix(es):\n\n* icu: Stack buffer overflow in the SRBRoot::addTag function (CVE-2025-5222)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2025-10-03T19:56:45.27031Z","modified":"2025-10-08T17:12:46.70519Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:24.923365Z"},{"id":"RLSA-2025:12083","title":"Moderate: icu security update","description":"The International Components for Unicode (ICU) library provides robust and full-featured Unicode services.\n\nSecurity Fix(es):\n\n* icu: Stack buffer overflow in the SRBRoot::addTag function (CVE-2025-5222)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2025-10-04T00:11:30.91642Z","modified":"2025-10-07T17:40:08.610481Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:24.923365Z"},{"id":"UBUNTU-CVE-2025-5222","description":"A stack buffer overflow was found in Internationl components for unicode (ICU ). While running the genrb binary, the 'subtag' struct overflowed at the SRBRoot::addTag function. This issue may lead to memory corruption and local arbitrary code execution.","status":"published","published":"2025-05-27T21:15:00Z","modified":"2026-11-09T12:49:26.671981223Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-09T13:27:42.046613Z"},{"id":"ALSA-2025:11888","title":"Moderate: icu security update","description":"The International Components for Unicode (ICU) library provides robust and full-featured Unicode services.  \n\nSecurity Fix(es):  \n\n  * icu: Stack buffer overflow in the SRBRoot::addTag function (CVE-2025-5222)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2025-07-28T00:00:00Z","modified":"2026-10-29T11:58:16.525913Z","updated_at":"2026-11-02T15:27:53.030731Z"},{"id":"ALSA-2025:12083","title":"Moderate: icu security update","description":"The International Components for Unicode (ICU) library provides robust and full-featured Unicode services.  \n\nSecurity Fix(es):  \n\n  * icu: Stack buffer overflow in the SRBRoot::addTag function (CVE-2025-5222)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2025-07-29T00:00:00Z","modified":"2026-10-29T11:32:27.477483605Z","updated_at":"2026-11-02T15:27:53.030731Z"},{"id":"AZL-66147","title":"CVE-2025-5222 affecting package icu for versions less than 68.2.0.9-2","description":"A stack buffer overflow was found in Internationl components for unicode (ICU ). While running the genrb binary, the 'subtag' struct overflowed at the SRBRoot::addTag function. This issue may lead to memory corruption and local arbitrary code execution.","status":"published","published":"2025-05-27T21:15:23Z","modified":"2026-04-21T04:37:46.988302Z","updated_at":"2026-11-02T15:28:08.354547Z"},{"id":"AZL-66156","title":"CVE-2025-5222 affecting package icu for versions less than 72.1.0.3-2","description":"A stack buffer overflow was found in Internationl components for unicode (ICU ). While running the genrb binary, the 'subtag' struct overflowed at the SRBRoot::addTag function. This issue may lead to memory corruption and local arbitrary code execution.","status":"published","published":"2025-05-27T21:15:23Z","modified":"2026-11-05T05:40:51Z","updated_at":"2026-11-05T16:41:23.841127Z"},{"id":"AZL-69692","title":"CVE-2025-5222 affecting package nodejs for versions less than 20.14.0-10","description":"A stack buffer overflow was found in Internationl components for unicode (ICU ). While running the genrb binary, the 'subtag' struct overflowed at the SRBRoot::addTag function. This issue may lead to memory corruption and local arbitrary code execution.","status":"published","published":"2025-05-27T21:15:23Z","modified":"2026-06-02T05:26:23Z","updated_at":"2026-11-02T15:28:08.907584Z"},{"id":"AZL-69706","title":"CVE-2025-5222 affecting package nodejs18 for versions less than 18.20.3-10","description":"A stack buffer overflow was found in Internationl components for unicode (ICU ). While running the genrb binary, the 'subtag' struct overflowed at the SRBRoot::addTag function. This issue may lead to memory corruption and local arbitrary code execution.","status":"published","published":"2025-05-27T21:15:23Z","modified":"2026-04-21T04:36:13.823954Z","updated_at":"2026-11-02T15:28:08.907584Z"},{"id":"CLSA-2025-1762539763","title":"icu: Fix of CVE-2025-5222","description":"- CVE-2025-5222: fix stack buffer overflow in genrb binary by properly handling\n  'subtag' struct in SRBRoot::addTag function","status":"published","published":"2025-11-07T18:22:47Z","modified":"2026-06-01T00:31:03.919968986Z","updated_at":"2026-11-02T15:43:42.427288Z"},{"id":"CLSA-2026-1774269500","title":"icu: Fix of CVE-2025-5222","description":"- CVE-2025-5222: Fix stack buffer overflow in addTag handling that allowed\n  subtag struct overflow leading to memory corruption and local arbitrary code\n  execution","status":"published","published":"2026-03-23T14:50:17Z","modified":"2026-06-01T00:33:09.602356332Z","updated_at":"2026-11-02T15:43:43.621843Z"},{"id":"CLSA-2026-1774273758","title":"icu: Fix of CVE-2025-5222","description":"- CVE-2025-5222: Fix stack buffer overflow in addTag handling that allowed\n  subtag struct overflow leading to memory corruption and local arbitrary code\n  execution","status":"published","published":"2026-03-23T13:49:22Z","modified":"2026-06-01T00:33:27.030323222Z","updated_at":"2026-11-02T15:43:43.621843Z"},{"id":"CLSA-2026-1787152014","title":"Fix CVE(s): CVE-2025-5222","description":"   * SECURITY UPDATE: stack buffer overflow in the genrb resource-bundle\n     compiler\n     - debian/patches/CVE-2025-5222.patch: replace the fixed-size 1024-byte\n       subtag/typeKeyword stack buffers in addCollation(),\n       parseCollationElements() and realParseTable() with CharString in\n       source/tools/genrb/parse.cpp, and add the CharString UChar* overload\n       it needs to source/common/charstr.{cpp,h}.\n     - CVE-2025-5222","status":"published","published":"2026-08-19T15:07:05Z","modified":"2026-10-26T09:30:42.801350471Z","updated_at":"2026-11-02T15:43:47.20725Z"},{"id":"DLA-4217-1","title":"icu - security update","status":"published","published":"2025-06-15T00:00:00Z","modified":"2026-03-09T02:11:13.109165Z","updated_at":"2026-11-02T15:46:12.7027Z"},{"id":"DSA-5951-1","title":"icu - security update","status":"published","published":"2025-06-26T00:00:00Z","modified":"2026-03-09T02:10:12.421788Z","updated_at":"2026-11-02T15:46:18.296714Z"},{"id":"MGASA-2025-0249","title":"Updated icu packages fix security vulnerability","description":"A stack buffer overflow was found in Internationl components for unicode\n(ICU ). While running the genrb binary, the 'subtag' struct overflowed\nat the SRBRoot::addTag function. This issue may lead to memory\ncorruption and local arbitrary code execution.\n","status":"published","published":"2025-10-27T16:53:39Z","modified":"2026-04-16T04:42:07.827897499Z","updated_at":"2026-11-02T15:49:43.178336Z"},{"id":"openSUSE-SU-2025:15230-1","title":"icu-77.1-3.1 on GA media","description":"These are all security issues fixed in the icu-77.1-3.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-07-03T00:00:00Z","modified":"2026-03-23T04:53:31.491283Z","updated_at":"2026-11-02T16:58:37.399567Z"},{"id":"SUSE-SU-2025:02059-1","title":"Security update for icu","description":"This update for icu fixes the following issues:\n\n- CVE-2025-5222: Stack buffer overflow in the SRBRoot:addTag function (bsc#1243721).\n","status":"published","published":"2025-06-23T01:38:08Z","modified":"2026-02-04T02:41:00.354761Z","updated_at":"2026-11-02T15:53:56.647031Z"},{"id":"SUSE-SU-2025:02079-1","title":"Security update for icu","description":"This update for icu fixes the following issues:\n\n- CVE-2025-5222: Stack buffer overflow in the SRBRoot:addTag function (bsc#1243721).\n","status":"published","published":"2025-06-24T10:24:22Z","modified":"2026-03-23T04:46:26.447609Z","updated_at":"2026-11-02T15:53:56.647031Z"},{"id":"SUSE-SU-2025:02216-1","title":"Security update for icu","description":"This update for icu fixes the following issues:\n\n- CVE-2025-5222: Fixed stack buffer overflow in the SRBRoot:addTag function (bsc#1243721)\n","status":"published","published":"2025-07-03T10:09:01Z","modified":"2025-07-03T18:17:01.101389Z","updated_at":"2026-11-02T15:53:56.647031Z"}]}}