CVE-2017-7867: Debian Linux

High severity, CVSS 7.5. EPSS: 4.6% chance of exploitation in the next 30 days.

International Components for Unicode (ICU) for C/C++ before 2017-02-13 has an out-of-bounds write caused by a heap-based buffer overflow related to the utf8TextAccess function in common/utext.cpp and the utext_setNativeIndex* function.

Affected products

• Debian Debian Linux: version 8.0 only
• Icu-Project International Components For Unicode: up to and including 58.2

Published 2017-04-14. Last modified 2026-06-17.