CVE-2014-8147: Apple Mac OS X

High severity, CVSS 7.5. EPSS: 23.6% chance of exploitation in the next 30 days.

The resolveImplicitLevels function in common/ubidi.c in the Unicode Bidirectional Algorithm implementation in ICU4C in International Components for Unicode (ICU) before 55.1 uses an integer data type that is inconsistent with a header file, which allows remote attackers to cause a denial of service (incorrect malloc followed by invalid free) or possibly execute arbitrary code via crafted text.

Affected products

• Apple Mac OS X: up to and including 10.10.4
• Apple watchOS: up to and including 1.0.1
• Icu-Project International Components For Unicode: before 55.1 (fixed in 55.1)

Published 2015-05-25. Last modified 2026-06-17.