This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2020-21913 →

DEBIAN-CVE-2020-21913

International Components for Unicode (ICU-20850) v66.1 was discovered to contain a use after free bug in the pkg_createWithAssemblyCode function in th...

Original description

The description as published by the source.

International Components for Unicode (ICU-20850) v66.1 was discovered to contain a use after free bug in the pkg_createWithAssemblyCode function in the file tools/pkgdata/pkgdata.cpp.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Affected packages

Debian:12 icu

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"67.1-2"}]}]

Debian:13 icu

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"67.1-2"}]}]

Debian:14 icu

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"67.1-2"}]}]

References

advisory security-tracker.debian.org