CVE-2016-7415 Memory corruption in n/a

Critical 9.8 Published 17 Sep 2016 Updated 6 Aug 2024

Remote attackers can cause a denial of service or potentially execute code via a stack-based buffer overflow in the ICU library's Locale class.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: Available

What is CVE-2016-7415?

CVE-2016-7415 is a critical memory corruption vulnerability in n/a, published on 17 Sep 2016. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Stack-based buffer overflow in the Locale class in common/locid.cpp in International Components for Unicode (ICU) through 57.1 for C/C++ allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a long locale string.

Weakness: CWE-119

Which versions are affected by CVE-2016-7415?

It affects 1 product.

Products include Icu-Project International Components for Unicode.

How do I fix CVE-2016-7415?

Upgrade to a fixed version.

Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.

Is CVE-2016-7415 being exploited?

There is no known exploitation of CVE-2016-7415 in the wild and no public exploit code.

Sources

Also known as ALPINE-CVE-2016-7415, CLEANSTART-2026-KO91964, DEBIAN-CVE-2016-7415, GHSA-7xfm-mgrj-8566, UBUNTU-CVE-2016-7415.