The resolveImplicitLevels function in common/ubidi.c in the Unicode Bidirectional Algorithm implementation in ICU4C in International Components for Unicode (ICU) before 55.1 uses an integer data type that is inconsistent with a header file, which allows remote attackers to cause a denial of service (incorrect malloc followed by invalid free) or possibly execute arbitrary code via crafted text.
References
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: redhat
Published: 2015-05-25T22:00:00
Updated: 2019-11-16T01:06:52
Reserved: 2014-10-10T00:00:00
Link: CVE-2014-8147
JSON object: View
NVD Information
Status : Modified
Published: 2015-05-25T22:59:01.927
Modified: 2023-11-07T02:22:15.890
Link: CVE-2014-8147
JSON object: View
Redhat Information
No data.
CWE