DEBIAN-CVE-2025-5222

DEBIAN-CVE-2025-5222 PUBLISHED CVSS 7 HIGH

A stack buffer overflow was found in Internationl components for unicode (ICU ). While running the genrb binary, the 'subtag' struct overflowed at the SRBRoot::addTag function. This issue may lead to memory corruption and local arbitrary code execution.

Risk Scores

CVSS 3.1

CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected Products

Vendor	Product	Versions
Debian:14	icu	0, 0
Debian:13	icu	0, 0
Debian:12	icu	72.1-3, 0, 72.1-3
Debian:11	icu	67.1-7, 67.1-7, 0

Timeline

May 27, 2025 CVE Published
Apr 28, 2026 CVE Updated

References

https://security-tracker.debian.org/tracker/CVE-2025-5222 advisory

Open in Interactive Console →