CVE-2018-18928

概要

参考情報

• bugs.chromium.org/p/chromium/issues/detail · Third Party Advisory
• unicode-org/icu commit 53d8c8f · Patch
• unicode-org.atlassian.net/browse/ICU-20246 · Vendor Advisory
• cert-portal.siemens.com/productcert/html/ssa-398330.html

international components for unicode のその他の脆弱性

• CVE-2020-10531高 8.8An issue was discovered in International Components for Unicode (ICU) for C/C++ through 66.1. An integer overflow, leading to a heap-based b…
• CVE-2017-15396中 6.5A stack buffer overflow in NumberingSystem in International Components for Unicode (ICU) for C/C++ before 60.2, as used in V8 in Google Chro…
• CVE-2017-15422中 6.5Integer overflow in international date handling in International Components for Unicode (ICU) for C/C++ before 60.1, as used in V8 in Google…
• CVE-2017-17484緊急 9.8The ucnv_UTF8FromUTF8 function in ucnv_u8.cpp in International Components for Unicode (ICU) for C/C++ through 60.1 mishandles ucnv_convertEx…
• CVE-2017-14952緊急 9.8Double free in i18n/zonemeta.cpp in International Components for Unicode (ICU) for C/C++ through 59.1 allows remote attackers to execute arb…