{"id":"OSV-2020-867","aliases":[],"status":"published","title":"Heap-buffer-overflow in icu_64::CollationIterator::appendCEsFromCE32","description":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15613\n\n```\nCrash type: Heap-buffer-overflow READ 4\nCrash state:\nicu_64::CollationIterator::appendCEsFromCE32\nicu_64::DataBuilderCollationIterator::fetchCEs\nicu_64::CollationDataBuilder::getCEs\n```","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2020-07-14T22:13:50.339661Z","modified":"2023-02-24T01:38:19Z","affected":[{"source":"osv","ecosystem":"OSS-Fuzz","package":"icu","ranges":[{"type":"GIT","events":[{"introduced":"6e5755a2a833bc64852eae12967d0a54d7adf629"},{"fixed":"4833cc89b2fae2e8863b46bf1dc785964847e882"}]}],"versions":["cldr/2020-09-22","cldr/2020-10-21","cldr/2021-02-17","cldr/2021-03-09","cldr/2021-06-15","cldr/2021-08-11","cldr/2021-08-25","cldr/2021-09-15","cldr/2021-09-29","cldr/2021-10-19","cldr/2021-10-25","cldr/2022-02-08","cldr/2022-02-22","cldr/2022-02-23","cldr/2022-03-30","cldr/2022-03-31","release-65-1","release-65-rc","release-66-1","release-66-preview","release-66-rc","release-67-1","release-67-rc","release-68-1","release-68-2","release-68-alpha","release-68-rc","release-69-1","release-69-rc","release-70-1","release-70-rc","release-71-rc","release-71-1","icu4x/2022-06-30/71.x","icu4x/2022-07-18/71.x","icu4x/2022-07-25/71.x","icu4x/2022-08-17/71.x"]}],"references":[{"url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15613","tags":["report"]}],"sources":{"osv":[{"id":"OSV-2020-867","title":"Heap-buffer-overflow in icu_64::CollationIterator::appendCEsFromCE32","description":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15613\n\n```\nCrash type: Heap-buffer-overflow READ 4\nCrash state:\nicu_64::CollationIterator::appendCEsFromCE32\nicu_64::DataBuilderCollationIterator::fetchCEs\nicu_64::CollationDataBuilder::getCEs\n```\n","status":"published","published":"2020-07-14T22:13:50.339661Z","modified":"2023-02-24T01:38:19.452338Z","updated_at":"2026-11-02T15:52:48.780247Z"}]}}