CVE-2016-7415

Critical

Published: 17/09/2016(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

A stack-based buffer overflow in the Locale class in common/locid.cpp in International Components for Unicode (ICU) through version 57.1 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a long locale string.

Risk Assessment

This vulnerability may lead to application crashes, affecting service availability. There is also a risk that attackers could exploit this vulnerability for further attacks.

Recommendation

It is recommended to update to the latest version of ICU to mitigate this vulnerability. Additionally, monitor and restrict the length of locale strings in applications using this library.

Original NVD description (English source)

Stack-based buffer overflow in the Locale class in common/locid.cpp in International Components for Unicode (ICU) through 57.1 for C/C++ allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a long locale string.