CVEs-PoC/2020/CVE-2020-10531.md

CVE-2020-10531

Description

An issue was discovered in International Components for Unicode (ICU) for C/C++ through 66.1. An integer overflow, leading to a heap-based buffer overflow, exists in the UnicodeString::doAppend() function in common/unistr.cpp.

POC

Reference

• https://unicode-org.atlassian.net/browse/ICU-20958
• https://www.oracle.com//security-alerts/cpujul2021.html
• https://www.oracle.com/security-alerts/cpuapr2022.html
• https://www.oracle.com/security-alerts/cpujan2021.html

Github

• https://github.com/ARPSyndicate/cvemon