Alerts This Week
Warning Icon 1 1,154
Alerts This Week
Warning Icon 1 1,154

Mageia 9: MGASA-2025-0249 ICU Critical Buffer Overflow CVE-2025-5222

mageia
Calendar Grey October 27, 2025
Dist Mageia Esm H88
Updated icu packages resolve critical buffer overflow issue in Mageia, with potential for code execution.
MGASA-2025-0249 - Updated icu packages fix security vulnerability

Summary

Description: A stack buffer overflow was found in Internationl components for unicode (ICU ). While running the genrb binary, the 'subtag' struct overflowed at the SRBRoot::addTag function. This issue may lead to memory corruption and local arbitrary code execution.

References

- https://bugs.mageia.org/show_bug.cgi?id=34442

- https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/KB5WTHV4QSRRUVG6KMSV4Z2FIQKSWR54/

- https://lists.debian.org/debian-security-announce/2025/msg00115.html

- https://www.cve.org/CVERecord?id=CVE-2025-5222

Topics%20covered

Topics Covered

security advisory buffer overflow critical code execution icu Mageia

Resolution

SRPMS

- 9/core/icu-73.2-1.2.mga9

Severity
critical
Lowest
Low
Medium
High
Critical

Publication date: 27 Oct 2025
URL: https://advisories.mageia.org/MGASA-2025-0249.html
Type: security
CVE: CVE-2025-5222

Topics%20covered

Topics Covered

security advisory buffer overflow critical code execution icu Mageia

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here