CVE-2018-18928

Name of the Vulnerable Software and Affected Versions International Components for Unicode (ICU) for C/C++ version 63.1

Description The issue is related to an integer overflow in the toScientificString() function within the number::impl::DecimalQuantity class, located in the i18n/number decimalquantity.cpp file.

Recommendations For International Components for Unicode (ICU) for C/C++ version 63.1, consider updating to a newer version that addresses the integer overflow issue in the toScientificString() function. As a temporary workaround, restrict the use of the toScientificString() function until a patch is available.