CVE-2020-10531
An issue was discovered in International Components for Unicode (ICU) for C/C++ through 66.1.
Published Mar 12, 2020 · updated Oct 14, 2026 · icu-project international components for unicode
An issue was discovered in International Components for Unicode (ICU) for C/C++ through 66.1. An integer overflow, leading to a heap-based buffer overflow, exists in the UnicodeString::doAppend() function in common/unistr.cpp.
Timeline
Detection, updates, and resolution for this record.
Mar 12, 2020 · NIST NVD
Detected
An issue was discovered in International Components for Unicode (ICU) for C/C++ through 66.1. An integer overflow, leading to a heap-based buffer overflow, exists in the UnicodeString::doAppend() function in common/unistr.cpp.
Oct 14, 2026 · NIST NVD
Updated
An issue was discovered in International Components for Unicode (ICU) for C/C++ through 66.1. An integer overflow, leading to a heap-based buffer overflow, exists in the UnicodeString::doAppend() function in common/unistr.cpp.
Affected
- cpe canonical/ubuntu linux12.04
- cpe debian/debian linux8.0
- cpe fedoraproject/fedora30
- cpe fedoraproject/fedora31
- cpe fedoraproject/fedora33
- cpe google/chromeversion unspecified
- cpe icu-project/international components for unicodeversion unspecified
- cpe opensuse/leap15.1
- cpe oracle/banking extensibility workbench14.3.0
- cpe redhat/enterprise linux desktop6.0
- cpe redhat/enterprise linux server6.0
- cpe redhat/enterprise linux workstation6.0
Sources
- CVE.orgCVE-2020-10531
Official CVE identifier
cve.org - NIST NVDCVE-2020-10531
An issue was discovered in International Components for Unicode (ICU) for C/C++ through 66.1. An integer overflow, leading to a heap-based buffer overflow, exists in the UnicodeString::doAppend() function in common/unistr.cpp.
nvd.nist.gov