Double Free The advisory has been revoked - it doesn't affect any version of package icu Open this link in a new tab
Threat Intelligence
EPSS
0.39% (73rd
percentile)
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk ID SNYK-DEBIAN9-ICU-1315157
- published 27 May 2021
- disclosed 7 Jun 2021
Introduced: 27 May 2021
CVE-2021-30535 Open this link in a new tabAmendment
The Debian
security team deemed this advisory irrelevant for Debian:9
.
NVD Description
Note: Versions mentioned in the description apply only to the upstream icu
package and not the icu
package as distributed by Debian
.
Double free in ICU in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.