CVE-2020-21913CWE-416

CVE-2020-21913

Medium · published September 20, 2021

CVSS v3.1
5.5
EPSS
1%
Percentile
68.3
In the wild
Unconfirmed
What it is

International Components for Unicode (ICU-20850) v66.1 was discovered to contain a use after free bug in the pkg_createWithAssemblyCode function in the file tools/pkgdata/pkgdata.cpp.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.01213 · 68.3th percentile
Weakness
CWE-416 · Use After Free
Published
2021-09-20T18:15Z
Affected products (3)
ProductVersionsFixed in
unicode/international_components_for_unicode< 66.166.1
debian/debian_linuxall versions—
debian/debian_linuxall versions—
References (9)
https://cert-portal.siemens.com/productcert/html/ssa-398330.html · 0b142b55-0307-4c5a-b3c9-f314f3fb7c5ehttps://github.com/unicode-org/icu/pull/886 · [email protected]https://lists.debian.org/debian-lts-announce/2021/10/msg00008.html · [email protected]https://unicode-org.atlassian.net/browse/ICU-20850 · [email protected]https://www.debian.org/security/2021/dsa-5014 · [email protected]https://github.com/unicode-org/icu/pull/886 · af854a3a-2127-422b-91ae-364da2661108https://lists.debian.org/debian-lts-announce/2021/10/msg00008.html · af854a3a-2127-422b-91ae-364da2661108https://unicode-org.atlassian.net/browse/ICU-20850 · af854a3a-2127-422b-91ae-364da2661108https://www.debian.org/security/2021/dsa-5014 · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 20 SEP 13:55Z
    International Components for Unicode (ICU-20850) v66.1 was discovered to contain a use after free bug in the pkg_createWithAssemblyCode function in the file…
    cvelistv5