CVE-2020-21913

MEDIUM 5.5CVE-2020-21913 · Published 20/09/2021 · updated 14/10/2026

Package	Affected versions	Patched versions
international components for unicode unicode	`< 66.1`	`66.1`

Description

International Components for Unicode (ICU-20850) v66.1 was discovered to contain a use after free bug in the pkg_createWithAssemblyCode function in the file tools/pkgdata/pkgdata.cpp.

References

unicode-org/icu#886 · Patch
lists.debian.org/debian-lts-announce/2021/10/msg00008.html · Mailing List
unicode-org.atlassian.net/browse/ICU-20850 · Exploit
debian.org/security/2021/dsa-5014 · Third Party Advisory
cert-portal.siemens.com/productcert/html/ssa-398330.html

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free