CVE-2025-5222

Name of the Vulnerable Software and Affected Versions icu (affected versions not specified) Debian Linux (affected versions not specified)

Description A stack buffer overflow issue was discovered in the International Components for Unicode (ICU). The issue occurs when running the genrb binary, causing the 'subtag' struct to overflow at the SRBRoot::addTag function. This may result in memory corruption and potentially allow for local arbitrary code execution.

Recommendations For icu, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For Debian Linux, at the moment, there is no information about a newer version that contains a fix for this vulnerability.