CVE-2016-7415: Icu-Project International Components For Unicode

Critical severity, CVSS 9.8. EPSS: 5.8% chance of exploitation in the next 30 days.

Stack-based buffer overflow in the Locale class in common/locid.cpp in International Components for Unicode (ICU) through 57.1 for C/C++ allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a long locale string.

Affected products

• Icu-Project International Components For Unicode: up to and including 57.1

Published 2016-09-17. Last modified 2026-06-17.