CVE-2020-10531
- State
- Published
- Severity
- Not scored
- Published
- Mar 12, 2020
- Updated
- Oct 14, 2026
- Reserved
- Mar 12, 2020
Description
An issue was discovered in International Components for Unicode (ICU) for C/C++ through 66.1. An integer overflow, leading to a heap-based buffer overflow, exists in the UnicodeString::doAppend() function in common/unistr.cpp.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- RHSA-2020:0738vendor-advisory
- GLSA-202003-15vendor-advisory
- FEDORA-2020-f6271d7afavendor-advisory
- [debian-lts-announce] 20200320 [SECURITY] [DLA 2151-1] icu security updatemailing-list
- DSA-4646vendor-advisory
- FEDORA-2020-39e0b8bd14vendor-advisory
- USN-4305-1vendor-advisory
- openSUSE-SU-2020:0459vendor-advisory
- FEDORA-2020-43d5a372fcvendor-advisory
- https://www.oracle.com/security-alerts/cpujan2021.html
- https://chromereleases.googleblog.com/2020/02/stable-channel-update-for-desktop_24.html
- https://bugs.chromium.org/p/chromium/issues/detail?id=1044570
- https://chromium.googlesource.com/chromium/deps/icu/+/9f4020916eb1f28f3666f018fdcbe6c9a37f0e08
- https://unicode-org.atlassian.net/browse/ICU-20958
- https://github.com/unicode-org/icu/pull/971
- https://github.com/unicode-org/icu/commit/b7d08bc04a4296982fcef8b6b8a354a9e4e7afca
- https://www.oracle.com//security-alerts/cpujul2021.html
- https://www.oracle.com/security-alerts/cpuapr2022.html
- https://cert-portal.siemens.com/productcert/html/ssa-398330.html
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.