Log in Start free

Vulnerability · Published May 27, 2025 · Assigned by redhat

CVE-2025-5222Icu: stack buffer overflow in the srbroot::addtag function

High 7.0

In plain English

A high-severity buffer overflow in icu. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 38% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code. Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)7.0High
Exploit odds (30 days)0.4%top 61.7% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack tooling1Public PoC

Official description

A stack buffer overflow was found in Internationl components for unicode (ICU ). While running the genrb binary, the 'subtag' struct overflowed at the SRBRoot::addTag function. This issue may lead to memory corruption and local arbitrary code execution.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
AlmaLinux:10icu74.2-5.el10_0ALSA-2025:11888
AlmaLinux:9icu67.1-10.el9_6ALSA-2025:12083
AlmaLinux:10libicu74.2-5.el10_0ALSA-2025:11888
AlmaLinux:9libicu67.1-10.el9_6ALSA-2025:12083
AlmaLinux:10libicu-devel74.2-5.el10_0ALSA-2025:11888
AlmaLinux:9libicu-devel67.1-10.el9_6ALSA-2025:12083
Alpine:v3.20icu74.2-r1ALPINE-CVE-2025-5222
Alpine:v3.21icu74.2-r1ALPINE-CVE-2025-5222
Alpine:v3.22icu76.1-r1ALPINE-CVE-2025-5222
Alpine:v3.23icu76.1-r1ALPINE-CVE-2025-5222
Alpine:v3.24icu76.1-r1ALPINE-CVE-2025-5222
Debian:12icu72.1-3+deb12u1DSA-5951-1
Debian:12icu72.1-3+deb12u1DEBIAN-CVE-2025-5222
Debian:13icu76.1-4DEBIAN-CVE-2025-5222
Debian:14icu76.1-4DEBIAN-CVE-2025-5222
Rocky Linux:10icu0:74.2-5.el10_0RLSA-2025:11888
Rocky Linux:9icu0:67.1-10.el9_6RLSA-2025:12083
Ubuntu:22.04:LTSicuno fix listedUBUNTU-CVE-2025-5222
Ubuntu:24.04:LTSicuno fix listedUBUNTU-CVE-2025-5222
Ubuntu:25.10icuno fix listedUBUNTU-CVE-2025-5222
Ubuntu:26.04:LTSicuno fix listedUBUNTU-CVE-2025-5222

Affected products (as reported)

VendorProductVersions
icu 0 – before 78.1
Red Hat Red Hat Enterprise Linux 10 see references
Red Hat Red Hat Enterprise Linux 9 see references
Red Hat Red Hat Enterprise Linux 9 see references
Red Hat Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions see references
Red Hat Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions see references
Red Hat Red Hat Enterprise Linux 9.4 Extended Update Support see references
Red Hat Red Hat OpenShift Container Platform 4.13 see references
Red Hat Red Hat OpenShift Container Platform 4.14 see references
Red Hat Red Hat OpenShift Container Platform 4.15 see references
Red Hat Red Hat OpenShift Container Platform 4.16 see references
Red Hat Red Hat OpenShift Container Platform 4.17 see references
Red Hat Red Hat OpenShift Container Platform 4.18 see references
Red Hat Red Hat OpenShift Container Platform 4.19 see references
Red Hat Red Hat OpenShift Container Platform 4.20 see references
Red Hat Red Hat Enterprise Linux 6 see references
Red Hat Red Hat Enterprise Linux 7 see references
Red Hat Red Hat Enterprise Linux 8 see references
Red Hat Red Hat Enterprise Linux 8 see references
Red Hat Red Hat OpenShift Container Platform 4 see references

Weakness: CWE-120 · Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

References