GCVE-110-CERTCC-2015-602540

Advisory PublishedCVSS 4.4/10

Vulnetix · Advisory published May 4, 2015

ICU Project ICU4C library, versions 52 through 54, contains a heap-based buffer overflow and an integer overflow.

Download JSON Open in Console

Risk Scores

CVSS 2.0

4.4/10

Medium · AV:L/AC:M/Au:N/C:P/I:P/A:P

certcc-cam

impact0population0exploitation0widely_known0score_current0ease_of_exploitation0

certcc-vrda

d1_impact3d1_population3d1_direct_report1

certcc-cvss-temporal-env

temporal_score3.4remediation_levelOFreport_confidenceCenvironmental_score3.42799915242645target_distributionHenvironmental_vectorCDP:N/TD:H/CR:ND/IR:ND/AR:ND

Aliases

CVE-2014-8146 CVE-2014-8147

References

ICU Project ICU4C library contains multiple overflow vulnerabilities

url

ICU Project ICU4C library contains multiple overflow vulnerabilities

url

ICU Project ICU4C library contains multiple overflow vulnerabilities

url

ICU Project ICU4C library contains multiple overflow vulnerabilities

url

ICU Project ICU4C library contains multiple overflow vulnerabilities

url

ICU Project ICU4C library contains multiple overflow vulnerabilities

url

ICU Project ICU4C library contains multiple overflow vulnerabilities

advisory

Browse GCVE Records

73,161 records in the GCVE database · Updated July 16, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON