CVE-2017-14952

Critical

Published: 16/10/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

CVE-2017-14952 is a double free vulnerability in i18n/zonemeta.cpp in International Components for Unicode (ICU) version 59.1. It allows remote attackers to execute arbitrary code via a crafted string.

Risk Assessment

This vulnerability may lead to remote code execution, posing a significant security risk to systems using this library.

Recommendation

It is recommended to update to the latest version of ICU to mitigate this vulnerability and to conduct an audit of applications using this library.

Original NVD description (English source)

Double free in i18n/zonemeta.cpp in International Components for Unicode (ICU) for C/C++ through 59.1 allows remote attackers to execute arbitrary code via a crafted string, aka a "redundant UVector entry clean up function call" issue.