Findings

CVE-2018-18928

International Components for Unicode (ICU) for C/C++ 63.1 has an integer overflow in number::impl::DecimalQuantity::toScientificString() in i18n/number_decimalquantity.cpp.

Published Nov 4, 2018 · updated Oct 14, 2026 · icu-project international components for unicode

International Components for Unicode (ICU) for C/C++ 63.1 has an integer overflow in number::impl::DecimalQuantity::toScientificString() in i18n/number_decimalquantity.cpp.

Timeline

Detection, updates, and resolution for this record.

  1. Nov 4, 2018 · NIST NVD

    Detected

    International Components for Unicode (ICU) for C/C++ 63.1 has an integer overflow in number::impl::DecimalQuantity::toScientificString() in i18n/number_decimalquantity.cpp.

  2. Oct 14, 2026 · NIST NVD

    Updated

    International Components for Unicode (ICU) for C/C++ 63.1 has an integer overflow in number::impl::DecimalQuantity::toScientificString() in i18n/number_decimalquantity.cpp.

Affected

  • cpe icu-project/international components for unicode63.1

Sources

  • CVE.orgCVE-2018-18928

    Official CVE identifier

    cve.org
  • NIST NVDCVE-2018-18928

    International Components for Unicode (ICU) for C/C++ 63.1 has an integer overflow in number::impl::DecimalQuantity::toScientificString() in i18n/number_decimalquantity.cpp.

    nvd.nist.gov

References