CVE-2020-10531

An issue was discovered in International Components for Unicode (ICU) for C/C++ through 66.1. An integer overflow, leading to a heap-based buffer overflow, exists in the UnicodeString::doAppend() function in common/unistr.cpp.

References

Affected packages

Git / github.com/nodejs/node

Affected ranges

Type: GIT
Repo: https://github.com/nodejs/node
Events: Introduced

ab4af087e83d91a46354d765306d3543b1d85423

Fixed

23adb548a57db0c56e359265108e7fe71d8b4f73

Type: GIT
Repo: https://github.com/unicode-org/icu
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Fixed

b7d08bc04a4296982fcef8b6b8a354a9e4e7afca

Affected versions

Other

cldr-32-beta2

last-cvs-commit

last-svn-commit

milestone-59-0-1

milestone-60-0-1

release-59-rc

release-60-rc

release-61-rc

release-62-rc

release-63-rc

release-64-1

release-64-2

release-64-2-rc

release-64-rc

release-64-rc2

release-65-1

release-65-rc

release-66-preview

v10.*

v10.13.0

v10.14.0

v10.14.1

v10.14.2

v10.15.0

v10.15.1

v10.15.2

v10.15.3

v10.16.0

v10.16.1

v10.16.2

v10.16.3

v10.17.0

v10.18.0

v10.18.1

v10.19.0

v10.20.0

v10.20.1

Database specific

{
    "vanir_signatures": [
        {
            "deprecated": false,
            "id": "CVE-2020-10531-073eef5e",
            "signature_version": "v1",
            "digest": {
                "line_hashes": [
                    "163326310584139620683127306141902484022",
                    "53777311359894187782715740876739193896",
                    "259529947505127728544220868421245451215",
                    "275100226479365140411992926648193383127"
                ],
                "threshold": 0.9
            },
            "signature_type": "Line",
            "target": {
                "file": "icu4c/source/common/unistr.cpp"
            },
            "source": "https://github.com/unicode-org/icu/commit/b7d08bc04a4296982fcef8b6b8a354a9e4e7afca"
        },
        {
            "deprecated": false,
            "id": "CVE-2020-10531-52deb174",
            "signature_version": "v1",
            "digest": {
                "length": 783.0,
                "function_hash": "311203197988252367781213452935901397736"
            },
            "signature_type": "Function",
            "target": {
                "function": "UnicodeString::doAppend",
                "file": "icu4c/source/common/unistr.cpp"
            },
            "source": "https://github.com/unicode-org/icu/commit/b7d08bc04a4296982fcef8b6b8a354a9e4e7afca"
        },
        {
            "deprecated": false,
            "id": "CVE-2020-10531-8aefd4ce",
            "signature_version": "v1",
            "digest": {
                "length": 1182.0,
                "function_hash": "282047263291457392771884626389331655576"
            },
            "signature_type": "Function",
            "target": {
                "function": "UnicodeStringTest::runIndexedTest",
                "file": "icu4c/source/test/intltest/ustrtest.cpp"
            },
            "source": "https://github.com/unicode-org/icu/commit/b7d08bc04a4296982fcef8b6b8a354a9e4e7afca"
        },
        {
            "deprecated": false,
            "id": "CVE-2020-10531-e4962e84",
            "signature_version": "v1",
            "digest": {
                "line_hashes": [
                    "281493051491934789897437676517916732519",
                    "16536246155701564973448811408738863909",
                    "170482884151252957689139896393908258054",
                    "244202485545224852526398604846366360242",
                    "297837186745196421493934701917911463958"
                ],
                "threshold": 0.9
            },
            "signature_type": "Line",
            "target": {
                "file": "icu4c/source/test/intltest/ustrtest.cpp"
            },
            "source": "https://github.com/unicode-org/icu/commit/b7d08bc04a4296982fcef8b6b8a354a9e4e7afca"
        },
        {
            "deprecated": false,
            "id": "CVE-2020-10531-efe65e00",
            "signature_version": "v1",
            "digest": {
                "line_hashes": [
                    "176032011631701592212894972723462041867",
                    "313180536602387946983383287883265241998",
                    "253612880278707994326010847370624889941"
                ],
                "threshold": 0.9
            },
            "signature_type": "Line",
            "target": {
                "file": "icu4c/source/test/intltest/ustrtest.h"
            },
            "source": "https://github.com/unicode-org/icu/commit/b7d08bc04a4296982fcef8b6b8a354a9e4e7afca"
        }
    ]
}