Icu: stack buffer overflow in the srbroot::addtag function

Summary

A stack buffer overflow was found in Internationl components for unicode (ICU ). While running the genrb binary, the 'subtag' struct overflowed at the SRBRoot::addTag function. This issue may lead to memory corruption and local arbitrary code execution.

Timeline

1. May 27, 2025, 8:51 PM UTCCVE published
2. May 28, 2025, 1:49 PM UTCCISA SSVC assessment

   Exploitation: none · Automatable: no · Technical impact: total

3. Oct 21, 2026, 8:12 PM UTCRecord last updated

Affected versions

• icu

  fixed in 78.1

• icu

  Version range not reported

• icu

  Version range not reported

• icu

  Version range not reported

• icu

  Version range not reported

• icu

  Version range not reported

• openshift/ose-rhel-coreos-9

  Version range not reported

• openshift/ose-rhel-coreos-9

  Version range not reported

• openshift/ose-rhel-coreos-9

  Version range not reported

• openshift/ose-rhel-coreos-9

  Version range not reported

• openshift/ose-rhel-coreos-9

  Version range not reported

• openshift/ose-rhel-coreos-9

  Version range not reported

• openshift/ose-rhel-coreos-9

  Version range not reported

• openshift/ose-rhel-coreos-9

  Version range not reported

• icu

  Version range not reported

• icu

  Version range not reported

• icu

  Version range not reported

• mingw-icu

  Version range not reported

• openshift/ose-rhel-coreos-8

  Version range not reported

References 16