The resolveImplicitLevels function in common/ubidi.c in the Unicode Bidirectional Algorithm implementation in ICU4C in International Components for Unicode (ICU) before 55.1 uses an integer data type that is inconsistent with a header file, which allows remote attackers to cause a denial of service (incorrect malloc followed by invalid free) or possibly execute arbitrary code via crafted text.
Vector
NETWORK
Complexity
LOW
Authentication
NONE
Confidentiality
PARTIAL
Integrity
PARTIAL
Availability
PARTIAL
Icu-project International components for unicode 51.2 ~~~c/c++~~ (not an official CPE)
Icu-project International components for unicode 50.1.2 ~~~c/c++~~ (not an official CPE)
Icu-project International components for unicode 51.1 ~~~c/c++~~ (not an official CPE)
Icu-project International components for unicode 50.1.1 ~~~c/c++~~ (not an official CPE)
Icu-project International components for unicode 50.1 ~~~c/c++~~ (not an official CPE)
Icu-project International components for unicode 49.1.2 ~~~c/c++~~ (not an official CPE)
Icu-project International components for unicode 49.1.1 ~~~c/c++~~ (not an official CPE)
Icu-project International components for unicode 49.1 ~~~c/c++~~ (not an official CPE)
Icu-project International components for unicode 4.8.1.1 ~~~c/c++~~ (not an official CPE)
Icu-project International components for unicode 4.8.1 ~~~c/c++~~ (not an official CPE)
Icu-project International components for unicode 4.8 ~~~c/c++~~ (not an official CPE)
Icu-project International components for unicode 4.6.1 ~~~c/c++~~ (not an official CPE)
Icu-project International components for unicode 4.6 ~~~c/c++~~ (not an official CPE)
Icu-project International components for unicode 4.4.2.1 ~~~c/c++~~ (not an official CPE)
Icu-project International components for unicode 4.4.2 ~~~c/c++~~ (not an official CPE)
Icu-project International components for unicode 4.4.1 ~~~c/c++~~ (not an official CPE)
Icu-project International components for unicode 4.2.0.1 ~~~c/c++~~ (not an official CPE)
Icu-project International components for unicode 4.2 ~~~c/c++~~ (not an official CPE)
Icu-project International components for unicode 4.0.1 ~~~c/c++~~ (not an official CPE)
Icu-project International components for unicode 4.0 ~~~c/c++~~ (not an official CPE)
Icu-project International components for unicode 3.8.1 ~~~c/c++~~ (not an official CPE)
Icu-project International components for unicode 3.8 ~~~c/c++~~ (not an official CPE)
Icu-project International components for unicode 3.6 ~~~c/c++~~ (not an official CPE)
Icu-project International components for unicode 3.4.1 ~~~c/c++~~ (not an official CPE)
Icu-project International components for unicode 3.4 ~~~c/c++~~ (not an official CPE)
Icu-project International components for unicode 3.2.1 ~~~c/c++~~ (not an official CPE)
Icu-project International components for unicode 3.2 ~~~c/c++~~ (not an official CPE)
Icu-project International components for unicode 3.0 ~~~c/c++~~ (not an official CPE)
Icu-project International components for unicode 2.8 ~~~c/c++~~ (not an official CPE)
Icu-project International components for unicode 2.6.2 ~~~c/c++~~ (not an official CPE)
Icu-project International components for unicode 2.6.1 ~~~c/c++~~ (not an official CPE)
Icu-project International components for unicode 2.6 ~~~c/c++~~ (not an official CPE)
Icu-project International components for unicode 2.4 ~~~c/c++~~ (not an official CPE)
Icu-project International components for unicode 2.2 ~~~c/c++~~ (not an official CPE)
Icu-project International components for unicode 2.1 ~~~c/c++~~ (not an official CPE)
Icu-project International components for unicode 2.0.2 ~~~c/c++~~ (not an official CPE)
Icu-project International components for unicode 2.0.1 ~~~c/c++~~ (not an official CPE)
Icu-project International components for unicode 2.0 ~~~c/c++~~ (not an official CPE)
Icu-project International components for unicode 1.8.1 ~~~c/c++~~ (not an official CPE)
Icu-project International components for unicode 1.8 ~~~c/c++~~ (not an official CPE)
Icu-project International components for unicode 1.7 ~~~c/c++~~ (not an official CPE)
Icu-project International components for unicode 1.6 ~~~c/c++~~ (not an official CPE)
Icu-project International components for unicode 1.5 ~~~c/c++~~ (not an official CPE)
Icu-project International components for unicode 1.4.2 ~~~c/c++~~ (not an official CPE)
Icu-project International components for unicode 1.4.1.2 ~~~c/c++~~ (not an official CPE)
Icu-project International components for unicode 1.4.1.1 ~~~c/c++~~ (not an official CPE)
Icu-project International components for unicode 1.4.1 ~~~c/c++~~ (not an official CPE)
Icu-project International components for unicode 1.4 ~~~c/c++~~ (not an official CPE)
Icu-project International components for unicode 52.1 ~~~c/c++~~ (not an official CPE)
Icu-project International components for unicode 53.1 ~~~c/c++~~ (not an official CPE)
Icu-project International components for unicode 54.1 ~~~c/c++~~ (not an official CPE)