RHSA-2025:11888Vendor advisory
https://access.redhat.com/errata/RHSA-2025:11888 CVE-2025-5222
HIGH
Icu: stack buffer overflow in the srbroot::addtag function
Record summary
CVE-2025-5222 has a selected CVSS score of 7.0 (high); EIP currently links 1 repository PoC.
Description
A stack buffer overflow was found in Internationl components for unicode (ICU ). While running the genrb binary, the 'subtag' struct overflowed at the SRBRoot::addTag function. This issue may lead to memory corruption and local arbitrary code execution.
Description source: CVE List
Exploitation context
Available material
- Repository PoCs
- 1
CISA SSVC decision
ExploitationNone
AutomatableNo
Technical impactTotal
CISA Coordinator · SSVC 2.0.3 · Evaluated May 28, 2025 · Source: CVE List
Affected products and versions
12| Product | Source | Version range | Status |
|---|---|---|---|
Default status: affected | CVE List | 0:74.2-5.el10_0 to < * | unaffected |
Default status: unknown | CVE List | Version data not supplied | |
Default status: unknown | CVE List | Version data not supplied | |
Default status: affected | CVE List | Version data not supplied | |
Default status: affected | CVE List | Version data not supplied | |
Default status: affected | CVE List | 0:67.1-10.el9_6 to < * | unaffected |
Red Hat Enterprise Linux 9.0 Update Services for SAP SolutionsBrowse Red Hat / Red Hat Enterprise Linux 9.0 Update Services for SAP SolutionsicuDefault status: affected | CVE List | 0:67.1-10.el9_0 to < * | unaffected |
Red Hat Enterprise Linux 9.2 Update Services for SAP SolutionsBrowse Red Hat / Red Hat Enterprise Linux 9.2 Update Services for SAP SolutionsicuDefault status: affected | CVE List | 0:67.1-10.el9_2 to < * | unaffected |
Red Hat Enterprise Linux 9.4 Extended Update SupportBrowse Red Hat / Red Hat Enterprise Linux 9.4 Extended Update SupporticuDefault status: affected | CVE List | 0:67.1-10.el9_4 to < * | unaffected |
Default status: affected | CVE List | Version data not supplied | |
SIDIS Secured SmartPlugBrowse Siemens / SIDIS Secured SmartPlugDefault status: unknown | CVE List | Before V7.26.0310 | affected |
icuDefault status: unaffected | CVE List | Before 78.1 | affected |
Proofs of concept
1Repository PoCs
GitHubberkley4/icu-74-debianRepository PoCby berkley4Stars: 2Not analyzed28 files
References
11RHSA-2025:12083Vendor advisory
https://access.redhat.com/errata/RHSA-2025:12083 RHSA-2025:12331Vendor advisory
https://access.redhat.com/errata/RHSA-2025:12331 RHSA-2025:12332Vendor advisory
https://access.redhat.com/errata/RHSA-2025:12332 RHSA-2025:12333Vendor advisory
https://access.redhat.com/errata/RHSA-2025:12333 access.redhat.comvdb entry
https://access.redhat.com/security/cve/CVE-2025-5222 RHBZ#2368600issue tracking
https://bugzilla.redhat.com/show_bug.cgi?id=2368600 cert-portal.siemens.com
https://cert-portal.siemens.com/productcert/html/ssa-585531.html lists.debian.org
https://lists.debian.org/debian-lts-announce/2025/06/msg00015.html nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2025-5222 unicode-org.atlassian.net
https://unicode-org.atlassian.net/jira/software/c/projects/ICU/issues/ICU-22957