An issue was discovered in International Components for Unicode (ICU) for C/C++ through 66.1. An integer overflow, leading to a heap-based buffer overflow, exists in the UnicodeString::doAppend() function in common/unistr.cpp.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10531
Reference (s):
- DEBIAN:DSA-4646
- URL: https://www.debian.org/security/2020/dsa-4646
- FEDORA:FEDORA-2020-39e0b8bd14
- URL: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6IOHSO6BUKC6I66J5PZOMAGFVJ66ZS57/
- FEDORA:FEDORA-2020-43d5a372fc