EulerOS 2.0 SP11 : icu (EulerOS-SA-2026-4237)

According to the versions of the icu packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A stack buffer overflow was found in Internationl components for unicode ICU . While running the genrb binary, the 'subtag' struct overflowed at the...

EulerOS 2.0 SP11 : icu (EulerOS-SA-2026-4328)

According to the versions of the icu packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A stack buffer overflow was found in Internationl components for unicode ICU . While running the genrb binary, the 'subtag' struct overflowed at the...

Rocky Linux 9 [CIQ] Security Update: icu / icu-debuginfo / icu-debugsource / libicu / libicu-debuginfo / etc (crlsa-2025_12083)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202512083 advisory. icu: Stack buffer overflow in the SRBRoot::addTag function CVE-2025-5222 Tenable has extracted the preceding description block directly from the CIQ security...

Rocky Linux 10.0 [CIQ] Security Update: icu / icu-debuginfo / icu-debugsource / libicu / libicu-debuginfo / etc (crlsa-2025_11888)

The Rocky Linux 10.0 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202511888 advisory. icu: Stack buffer overflow in the SRBRoot::addTag function CVE-2025-5222 Tenable has extracted the preceding description block directly from the CIQ security...

CentOS Linux 7 [TuxCare] Security Update: icu / libicu / libicu-devel / libicu-doc (CENTOS7:CLSA-2026:1774269500)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1774269500 advisory. - A stack buffer overflow was found in Internationl components for unicode ICU . While running the genrb binary, the 'subtag' struct overflowed a...

AlmaLinux 9.2 [TuxCare] Security Update: icu / libicu / libicu-devel / libicu-doc (ALMALINUX9.2:CLSA-2025:1762539763)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1762539763 advisory. - A stack buffer overflow was found in Internationl components for unicode ICU . While running the genrb binary, the 'subtag' struct overflow...

Astra Linux – Vulnerability in ICU

A stack buffer overflow was detected in the International components for Unicode ICU. While running the genrb binary, the ‘subtag’ structure exceeded its limit at the SRBRoot::addTag function. This issue may lead to memory corruption and the execution of arbitrary local code...

MiracleLinux 9 : icu-67.1-10.el9_6 (AXSA:2025-10657:01)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2025-10657:01 advisory. icu: Stack buffer overflow in the SRBRoot::addTag function CVE-2025-5222 Tenable has extracted the preceding description block directly from the MiracleLinu...

EulerOS 2.0 SP13 : icu (EulerOS-SA-2025-2446)

According to the versions of the icu packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A stack buffer overflow was found in Internationl components for unicode ICU . While running the genrb binary, the 'subtag' struct overflowed at the...

EulerOS 2.0 SP10 : icu (EulerOS-SA-2025-2388)

According to the versions of the icu packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A stack buffer overflow was found in Internationl components for unicode ICU . While running the genrb binary, the 'subtag' struct overflowed at the...

CLSA-2025-1762539763 icu: Fix of CVE-2025-5222

CVE-2025-5222: fix stack buffer overflow in genrb binary by properly handling 'subtag' struct in SRBRoot::addTag function...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: icu (UTSA-2025-984781)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-984781 advisory. A stack buffer overflow was found in Internationl components for unicode ICU . While running the genrb binary, the 'subtag' struct overflowed at the SRBRoot::addTag...

RockyLinux 10 : icu (RLSA-2025:11888)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:11888 advisory. icu: Stack buffer overflow in the SRBRoot::addTag function CVE-2025-5222 Tenable has extracted the preceding description block directly from the RockyLinux...

RockyLinux 9 : icu (RLSA-2025:12083)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:12083 advisory. icu: Stack buffer overflow in the SRBRoot::addTag function CVE-2025-5222 Tenable has extracted the preceding description block directly from the RockyLinux...

RLSA-2025:11888 Moderate: icu security update

The International Components for Unicode ICU library provides robust and full-featured Unicode services. Security Fixes: icu: Stack buffer overflow in the SRBRoot::addTag function CVE-2025-5222 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and...

ROS-20250929-02

Vulnerability of SRBRoot::addTag function of the library for working with Unicode ICU is related to buffer copying without checking the size of the input data. Exploitation of the vulnerability could allow an attacker to execute arbitrary code and cause a crash. an attacker to execute arbitrary...

ICU SRBRoot Code Execution

The vulnerability of the SRBRoot::addTag function in the Unicode-based ICU library is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to execute arbitrary code and cause service failures...

Icu: stack buffer overflow in the srbroot::addtag function

...

Linux Distros Unpatched Vulnerability : CVE-2025-5222

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A stack buffer overflow was found in Internationl components for unicode ICU . While running the genrb binary, the 'subtag' struct overflowed at the...

OESA-2025-1982 icu security update

Tools and utilities for developing with icu. Security Fixes: A stack buffer overflow was found in Internationl components for unicode ICU . While running the genrb binary, the 'subtag' struct overflowed at the SRBRoot::addTag function. This issue may lead to memory corruption and local arbitrary...