CVE-2017-7867

Name of the Vulnerable Software and Affected Versions International Components for Unicode (ICU) for C/C++ versions prior to 2017-02-13

Description The issue is related to an out-of-bounds write caused by a heap-based buffer overflow. This is connected to the utf8TextAccess function in common/utext.cpp and the utext setNativeIndex* function.

Recommendations For versions prior to 2017-02-13, update to a version released after 2017-02-13 to resolve the issue. As a temporary workaround, consider restricting access to the utf8TextAccess function and the utext setNativeIndex* function until a patch is available.