CVE-2014-9911

Name of the Vulnerable Software and Affected Versions International Components for Unicode (ICU) versions prior to 54.1

Description The issue is related to a stack-based buffer overflow in the ures getByKeyWithFallback function. This can be triggered by remote attackers via a crafted uloc getDisplayName call, potentially leading to a denial of service or other unspecified impacts.

Recommendations For versions prior to 54.1, update to version 54.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the ures getByKeyWithFallback function until a patch is available.