CVE-2014-8147

The resolveImplicitLevels function in common/ubidi.c in the Unicode Bidirectional Algorithm implementation in ICU4C in International Components for Unicode…

published May 25, 2015

CVSS
—
EPSS
24%
Percentile
97.8
In the wild
Unconfirmed
What it is

The resolveImplicitLevels function in common/ubidi.c in the Unicode Bidirectional Algorithm implementation in ICU4C in International Components for Unicode (ICU) before 55.1 uses an integer data type that is inconsistent with a header file, which allows remote attackers to cause a denial of service (incorrect malloc followed by invalid free) or possibly execute arbitrary code via crafted text.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.23611 · 97.8th percentile
Published
2015-05-25T22:00Z
EPSS history
Timeline
  • 25 MAY 22:00Z
    The resolveImplicitLevels function in common/ubidi.c in the Unicode Bidirectional Algorithm implementation in ICU4C in International Components for Unicode…
    cvelistv5