CVE-2020-21913

MEDIO 5.5CVE-2020-21913 · Published 20/09/2021 · updated 14/10/2026

En resumen

CVE-2020-21913 es una vulnerabilidad MEDIO (CVSS 5.5) que afecta a international components for unicode (unicode).
Probabilidad de explotación en los próximos 30 días (EPSS): 1.2%, mayor que el 68.5% de las vulnerabilidades.
Solución: actualizar a 66.1 o posterior.

Package	Affected versions	Patched versions
international components for unicode unicode	`< 66.1`	`66.1`

Description

International Components for Unicode (ICU-20850) v66.1 was discovered to contain a use after free bug in the pkg_createWithAssemblyCode function in the file tools/pkgdata/pkgdata.cpp.

References

unicode-org/icu#886 · Patch
lists.debian.org/debian-lts-announce/2021/10/msg00008.html · Mailing List
unicode-org.atlassian.net/browse/ICU-20850 · Exploit
debian.org/security/2021/dsa-5014 · Third Party Advisory
cert-portal.siemens.com/productcert/html/ssa-398330.html

Más vulnerabilidades de international components for unicode

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free