CVE-2025-5222

Highest-risk unexploited with PoCs

Exploit code exists, no confirmed in-the-wild activity, ranked by EPSS

Actively Exploited

Confirmed exploited in the wild, sorted by most recently updated

CVSS 7EPSS <1%

Published 2025-05-27Updated 2025-07-25

PoC

Vulnerability details

A stack buffer overflow was found in Internationl components for unicode (ICU ). While running the genrb binary, the 'subtag' struct overflowed at the SRBRoot::addTag function. This issue may lead to memory corruption and local arbitrary code execution.

CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

CNAredhat

EPSS score history

Sources

2 links

PoC links are not available for guest users. Login to view them.

NVD Analysis CVE Organization

Profile

CVSS

EPSS

<1%

Published

2025-05-27

Updated

2025-07-25

CNA

redhat

Vendors

Red Hat

6 products

CPEs

cpe:/o:redhat:enterprise_linux:10.0

cpe:/o:redhat:enterprise_linux:9::baseos

cpe:/a:redhat:enterprise_linux:9::appstream

cpe:/o:redhat:rhel_e4s:9.0::baseos

cpe:/a:redhat:rhel_e4s:9.0::appstream

cpe:/a:redhat:rhel_e4s:9.2::appstream

cpe:/o:redhat:rhel_e4s:9.2::baseos

cpe:/a:redhat:rhel_eus:9.4::appstream

cpe:/o:redhat:rhel_eus:9.4::baseos

cpe:/o:redhat:enterprise_linux:6

cpe:/o:redhat:enterprise_linux:7

cpe:/o:redhat:enterprise_linux:8

cpe:/a:redhat:openshift:4

cpe:/o:redhat:rhivos:1

cpe:/a:redhat:openshift:4.20::el9

cpe:/a:redhat:openshift:4.18::el9

cpe:/a:redhat:openshift:4.19::el9

cpe:/a:redhat:openshift:4.14::el9

cpe:/a:redhat:openshift:4.15::el9

cpe:/a:redhat:openshift:4.16::el9

cpe:/a:redhat:openshift:4.17::el9

cpe:/a:redhat:openshift:4.13::el9

Vulnerability dashboard

Highest-risk unexploited with PoCs

Actively Exploited

Recently Updated