CVE-2014-8146: Buffer Overflow
The resolveImplicitLevels function in common/ubidi.c in the Unicode Bidirectional Algorithm implementation in ICU4C in International Components for Unicode (ICU) before 55.1 does not properly track directionally isolated pieces of text, which allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly execute arbitrary code via crafted text.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2014-8146?
CVE-2014-8146 has been classified as a moderate severity vulnerability due to its potential to cause denial of service.
What software applications are affected by CVE-2014-8146?
CVE-2014-8146 affects various versions of Apple iTunes, iPhone OS, Mac OS X, watchOS, and ICU before version 55.1.
How do I fix CVE-2014-8146?
To fix CVE-2014-8146, update affected software to versions that are equal to or greater than those that resolve the vulnerability.
Can CVE-2014-8146 be exploited remotely?
Yes, CVE-2014-8146 can be exploited by remote attackers to trigger a denial of service.
What does CVE-2014-8146 affect in the Unicode implementation?
CVE-2014-8146 affects the resolveImplicitLevels function in the Unicode Bidirectional Algorithm implementation, leading to improper tracking of directionally isolated text.