Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:6410
HistoryMay 28, 2018 - 5:12 p.m.

Remote Code Execution (RCE)

2018-05-2817:12:41
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
16

EPSS

0.032

Percentile

91.3%

icu4c is vulnerable to remote code execution (RCE) attacks. A malicious user can pass a string to the ucnv_UTF8FromUTF8 function in ucnv_u8.cpp to cause a buffer overflow that can crash the application or cause arbitrary code to be executed.