CVEs-PoC/2025/CVE-2025-5222.md

CVE-2025-5222

Description

A stack buffer overflow was found in Internationl components for unicode (ICU ). While running the genrb binary, the 'subtag' struct overflowed at the SRBRoot::addTag function. This issue may lead to memory corruption and local arbitrary code execution.

POC

Reference

No PoCs from references.

Github

• https://github.com/11notes/docker-paperless-ngx
• https://github.com/11notes/docker-unifi
• https://github.com/berkley4/icu-74-debian
• https://github.com/fkie-cad/nvd-json-data-feeds
• https://github.com/nomi-sec/PoC-in-GitHub
• https://github.com/runwhen-contrib/helm-charts
• https://github.com/w4zu/Debian_security