OSV-2021-1236

    Dashboard / Vulnerabilities / OSV-2021-1236

    OSV-2021-1236

    Published: 12 Sept 2021Last Modified: 24 Feb 2023

    Summary: UNKNOWN READ in icu_70::UCharsTrie::branchNext

    Details: OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38390 ``` Crash type: UNKNOWN READ Crash state: icu_70::UCharsTrie::branchNext icu_70::UCharsTrie::firstForCodePoint icu_70::CollationIterator::nextCE32FromContraction ```

    References: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38390

    Affected packages

    Package

    Name: icu

    Purl: pkg:generic/icu

    Affected ranges

    Type: GIT

    Events:

    Introduced- 7851f708a3dd43fc1e0e9dd784e7dfe9a70915b2
    Fixed -4833cc89b2fae2e8863b46bf1dc785964847e882

    Affected versions

    cldr/2021-09-15

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    OSV-2021-1236 | CVE-DB