CVE-2020-10531 json
An issue was discovered in International Components for Unicode (ICU) for C/C++ through 66.1.
published 2020-03-12 6 y ago modified 2026-10-14 26 d ago also BIT-node-2020-10531 , BIT-node-min-2020-10531 , EUVD-2020-2984 , JLSEC-2026-58
- cvss
- 8.8
- version 3.1, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 2.7%
- EPSS 2.7% chance of exploitation in 30 days, percentile 85%
- public exploits
- 0
- none known
Summary
An issue was discovered in International Components for Unicode (ICU) for C/C++ through 66.1. An integer overflow, leading to a heap-based buffer overflow, exists in the UnicodeString::doAppend() function in common/unistr.cpp.
Patch / fix
- bitnami node 10.21.0
- bitnami node-min 10.21.0
- julia ICU_jll 67.1.0+3
- Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP V3.1.5
- Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP V3.1.5
- Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP MFP V3.1.5
- icu Debian 14, Debian 13, Debian 12 63.2-3
debian advisories DEBIAN-CVE-2020-10531
- icu Ubuntu 16.04 LTS 55.1-7ubuntu0.5
- icu Ubuntu 18.04 LTS 60.2-3ubuntu3.1
- chromium-browser Ubuntu 16.04 LTS 80.0.3987.149-0ubuntu0.16.04.1
- chromium-browser Ubuntu 18.04 LTS 80.0.3987.149-0ubuntu0.18.04.1
- icu Ubuntu Pro 14.04 LTS 52.1-3ubuntu0.8+esm1
ubuntu advisories UBUNTU-CVE-2020-10531
Ubuntu security data © Canonical Ltd., from https://github.com/canonical/ubuntu-security-notices via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0
- rh-nodejs10-nodejs RHEL 3 SOFTWARE_COLLECTIONS 10.21.0-3.el7
- rh-nodejs10-npm RHEL 3 SOFTWARE_COLLECTIONS 6.14.4-10.21.0.3.el7
- rh-nodejs12-nodejs RHEL 3 SOFTWARE_COLLECTIONS 12.18.2-1.el7
- rh-nodejs12-npm RHEL 3 SOFTWARE_COLLECTIONS 6.14.5-12.18.2.1.el7
- nodejs-nodemon RHEL 8, RHEL 8.0 E4S 1.18.3-1.module+el8+2632+6c5111ed
- nodejs-packaging RHEL 8, RHEL 8.0 E4S 17-3.module+el8+2873+aa7dfd9a
- npm RHEL 8 1:6.13.4-1.10.19.0.2.module+el8.1.0+6118+5aaa808b
- nodejs RHEL 8 1:10.19.0-2.module+el8.1.0+6118+5aaa808b
red hat advisories RHSA-2020:3084RHSA-2020:2895RHSA-2020:1343RHSA-2020:1317RHSA-2020:0896RHSA-2020:1293
- icu SLES for SAP 15 SP4, SLES for SAP 15 SP3, SLES for SAP 15 SP2 +9 more 60.2-150000.3.15.4
- icu73_2 SLE Module for Basesystem 15 SP5, SLE Module for Basesystem 15 SP4, SLE Micro 5.4 +22 more 73.2-150000.1.3.1
- icu SLE Module for Server Applications 15 SP2, SLE Module for Package Hub 15 SP1, SLE Module for Basesystem 15 SP1 +4 more 60.2-3.9.1
- nodejs10 SLE Module for Web and Scripting 12 10.21.0-1.24.1
- nodejs10 SLES for SAP 15, SLES 15-LTSS, SLE Module for Web and Scripting 15 SP2 +3 more 10.21.0-1.21.1
- icu SLES for SAP 12 SP5, SLES for SAP 12 SP4, SLES for SAP 12 SP3 +18 more 52.1-8.10.1
suse advisories SUSE-OU-2024:0647-1SUSE-SU-2023:3563-3SUSE-SU-2023:3563-2SUSE-SU-2023:3563-1SUSE-SU-2020:0819-2SUSE-SU-2020:1575-1
- icu openSUSE Tumbleweed 73.2-2.1
- icu openSUSE Leap 15.1 60.2-lp151.3.11.1
opensuse advisories openSUSE-SU-2024:13127-1openSUSE-SU-2020:0459-1
- nodejs-nodemon AlmaLinux 8 1.18.3-1.module_el8.3.0+2023+d2377ea3
- nodejs-nodemon AlmaLinux 8 1.18.3-1.module_el8.3.0+2047+b07ac28e
- nodejs-packaging AlmaLinux 8 17-3.module_el8.4.0+2224+b07ac28e
- nodejs-packaging AlmaLinux 8 17-3.module_el8.4.0+2521+c668cc9f
- nodejs-packaging AlmaLinux 8 17-3.module_el8.3.0+2023+d2377ea3
- icu AlmaLinux 8 60.3-2.el8_1
- libicu AlmaLinux 8 60.3-2.el8_1
almalinux advisories ALSA-2020:1317ALSA-2020:1293ALSA-2020:0902
- nodejs-nodemon Rocky Linux 8 1.18.3-1.module+el8.3.0+101+f84c7154
- nodejs-packaging Rocky Linux 8 17-3.module+el8.3.0+101+f84c7154
- icu Rocky Linux 8 60.3-2.el8_1
rocky linux advisories RLSA-2020:1317RLSA-2020:1293RLSA-2020:0902
- icu Alpine 3.11, Alpine 3.10 64.2-r1
- icu Alpine 3.24, Alpine 3.23, Alpine 3.22 +10 more 65.1-r1
- icu Alpine 3.8 60.2-r3
- icu Alpine 3.9 62.1-r1
alpine advisories ALPINE-CVE-2020-10531
Alpine secdb © Alpine Linux, from https://secdb.alpinelinux.org via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0
Vendor advisories
What the vendors themselves say about their products: affected, fixed or not affected, and what to do.
red hat product security vex CVE-2020-10531 updated cvss 8.8
ICU: Integer overflow in UnicodeString::doAppend()
-
Red Hat Enterprise Linux 5 icuaffected: no fix planned “Out of support scope”
-
Red Hat Enterprise Linux AppStream (v. 8) nodejs 10.19.0-2.module+el8.1.0+6118+5aaa808b, nodejs 12.16.1-2.module+el8.1.0+6117+b25a342c, nodejs-packaging 17-3.module+el8+2873+aa7dfd9a, nodejs-nodemon 1.18.3-1.module+el8+2632+6c5111ed, nodejs-packaging 17-3.module+el8.1.0+3369+37ae6a45, npm 6.13.4-1.10.19.0.2.module+el8.1.0+6118+5aaa808b, +2 morefixed: vendor fix RHSA-2020:1317
-
Red Hat Enterprise Linux AppStream E4S (v. 8.0) nodejs 10.19.0-2.module+el8.0.0+6119+7cbe4838, nodejs-packaging 17-3.module+el8+2873+aa7dfd9a, nodejs-nodemon 1.18.3-1.module+el8+2632+6c5111ed, npm 6.13.4-1.10.19.0.2.module+el8.0.0+6119+7cbe4838fixed: vendor fix RHSA-2020:1343
-
Red Hat Enterprise Linux BaseOS (v. 8) icu 60.3-2.el8_1, libicu 60.3-2.el8_1fixed: vendor fix RHSA-2020:0902
-
Red Hat Enterprise Linux BaseOS E4S (v. 8.0) icu 60.3-2.el8_0, libicu 60.3-2.el8_0fixed: vendor fix RHSA-2020:0901
-
Red Hat Enterprise Linux Client (v. 7) icu 50.2-4.el7_7, libicu 50.2-4.el7_7 Red Hat Enterprise Linux Client Optional (v. 7) icu 50.2-4.el7_7 Red Hat Enterprise Linux ComputeNode (v. 7) icu 50.2-4.el7_7, libicu 50.2-4.el7_7 Red Hat Enterprise Linux ComputeNode Optional (v. 7) icu 50.2-4.el7_7fixed: vendor fix RHSA-2020:0897
-
Red Hat Enterprise Linux Desktop (v. 6) icu 4.2.1-15.el6_10, libicu 4.2.1-15.el6_10 Red Hat Enterprise Linux Desktop Optional (v. 6) icu 4.2.1-15.el6_10fixed: vendor fix RHSA-2020:0896
-
Red Hat Enterprise Linux Desktop Supplementary (v. 6) chromium-browser 80.0.3987.122-1.el6_10fixed: vendor fix RHSA-2020:0738
show 14 moreshow fewer
-
Red Hat Enterprise Linux HPC Node (v. 6) icu 4.2.1-15.el6_10, libicu 4.2.1-15.el6_10 Red Hat Enterprise Linux HPC Node Optional (v. 6) icu 4.2.1-15.el6_10fixed: vendor fix RHSA-2020:0896
-
Red Hat Enterprise Linux HPC Node Supplementary (v. 6) chromium-browser 80.0.3987.122-1.el6_10fixed: vendor fix RHSA-2020:0738
-
Red Hat Enterprise Linux Server (v. 6) icu 4.2.1-15.el6_10, libicu 4.2.1-15.el6_10fixed: vendor fix RHSA-2020:0896
-
Red Hat Enterprise Linux Server (v. 7) icu 50.2-4.el7_7, libicu 50.2-4.el7_7fixed: vendor fix RHSA-2020:0897
-
Red Hat Enterprise Linux Server Optional (v. 6) icu 4.2.1-15.el6_10fixed: vendor fix RHSA-2020:0896
-
Red Hat Enterprise Linux Server Optional (v. 7) icu 50.2-4.el7_7fixed: vendor fix RHSA-2020:0897
-
Red Hat Enterprise Linux Server Supplementary (v. 6) chromium-browser 80.0.3987.122-1.el6_10fixed: vendor fix RHSA-2020:0738
-
Red Hat Enterprise Linux Workstation (v. 6) icu 4.2.1-15.el6_10, libicu 4.2.1-15.el6_10fixed: vendor fix RHSA-2020:0896
-
Red Hat Enterprise Linux Workstation (v. 7) icu 50.2-4.el7_7, libicu 50.2-4.el7_7fixed: vendor fix RHSA-2020:0897
-
Red Hat Enterprise Linux Workstation Optional (v. 6) icu 4.2.1-15.el6_10fixed: vendor fix RHSA-2020:0896
-
Red Hat Enterprise Linux Workstation Optional (v. 7) icu 50.2-4.el7_7fixed: vendor fix RHSA-2020:0897
-
Red Hat Enterprise Linux Workstation Supplementary (v. 6) chromium-browser 80.0.3987.122-1.el6_10fixed: vendor fix RHSA-2020:0738
-
Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7) rh-nodejs10-nodejs 10.21.0-3.el7, rh-nodejs12-nodejs 12.18.2-1.el7, rh-nodejs10-npm 6.14.4-10.21.0.3.el7, rh-nodejs12-npm 6.14.5-12.18.2.1.el7 Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6) rh-nodejs10-nodejs 10.21.0-3.el7, rh-nodejs12-nodejs 12.18.2-1.el7, rh-nodejs10-npm 6.14.4-10.21.0.3.el7, rh-nodejs12-npm 6.14.5-12.18.2.1.el7 Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7) rh-nodejs10-nodejs 10.21.0-3.el7, rh-nodejs12-nodejs 12.18.2-1.el7, rh-nodejs10-npm 6.14.4-10.21.0.3.el7, rh-nodejs12-npm 6.14.5-12.18.2.1.el7 Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7) rh-nodejs10-nodejs 10.21.0-3.el7, rh-nodejs12-nodejs 12.18.2-1.el7, rh-nodejs10-npm 6.14.4-10.21.0.3.el7, rh-nodejs12-npm 6.14.5-12.18.2.1.el7fixed: vendor fix RHSA-2020:3084
-
Red Hat Enterprise Linux 5 java-1.7.0-openjdk Red Hat Enterprise Linux 6 icu4j, icu4j-eclipse, icu4j-javadoc, java-1.7.0-openjdk, java-1.8.0-openjdk, java-1.7.0-openjdk-src, +6 more Red Hat Enterprise Linux 7 java-11-openjdk, java-1.7.0-openjdk, java-1.8.0-openjdk, java-11-openjdk-src, java-11-openjdk-demo, java-11-openjdk-jmods, +15 more Red Hat Enterprise Linux 8 java-11-openjdk, java-1.8.0-openjdk, java-11-openjdk-src, java-11-openjdk-demo, java-11-openjdk-jmods, java-1.8.0-openjdk-src, +35 morenot affected: vulnerable code not present
Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf
cisa ICSA-23-348-10 updated cvss 8.8
Siemens SIMATIC S7-1500
-
Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0) >= 3.1.0, < 3.1.5 Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AC0) >= 3.1.0, < 3.1.5 Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AB0) >= 3.1.0, < 3.1.5 Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AC0) >= 3.1.0, < 3.1.5 Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP MFP (6AG1518-4AX00-4AC0) >= 3.1.0, < 3.1.5affected: fixed in V3.1.5, mitigation support.industry.siemens.com
Facts from CISA's republication of the vendor's own advisory (CSAF); the linked advisory is the authoritative source. CISA notification · csaf
Exploit prediction
2.67% chance of exploitation in the next 30 days, higher than 85% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 3.1 | 8.8 | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
| NVD | 2.0 | 6.8 | AV:N/AC:M/Au:N/C:P/I:P/A:P |
| OSV | 3.1 | 8.8 | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
Affected packages
| ecosystem | package | affected | fixed in |
|---|---|---|---|
| bitnami | node | >=10.13.0, <10.21.0 |
10.21.0 |
| bitnami | node-min | >=10.13.0, <10.21.0 |
10.21.0 |
| julia | ICU_jll | <67.1.0+3 |
67.1.0+3 |
Affected products
- Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP
- Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP
- Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP MFP
Classification
- Weakness
- Technology feeds
References
-
chromium.googlesource.com
/chromium/deps/icu/+/9f4020916eb1f28f3666f018fdcbe6c9a37f0e08
patch, third-party-advisory, advisory, web
-
github.com
/unicode-org/icu/pull/971
issue-tracking, patch, third-party-advisory, advisory, web
-
github.com
/unicode-org/icu/commit/b7d08bc04a4296982fcef8b6b8a354a9e4e7afca
patch, third-party-advisory, advisory, web
-
oracle.com
/security-alerts/cpujan2021.html
patch, third-party-advisory, advisory, web
-
access.redhat.com
/errata/RHSA-2020:0738
vendor-advisory, third-party-advisory, advisory, web
-
security.gentoo.org
/glsa/202003-15
vendor-advisory, third-party-advisory, advisory, web
-
lists.fedoraproject.org
/archives/list/package-announce%40lists.fedoraproject.org/message/X3B5RWJQD5LA45MYLLR55KZJOJ5NVZGP/
vendor-advisory, web
-
debian.org
/security/2020/dsa-4646
vendor-advisory, third-party-advisory, advisory, web
-
lists.fedoraproject.org
/archives/list/package-announce%40lists.fedoraproject.org/message/6IOHSO6BUKC6I66J5PZOMAGFVJ66ZS57/
vendor-advisory, web
-
usn.ubuntu.com
/4305-1/
vendor-advisory, third-party-advisory, advisory, web
-
lists.opensuse.org
/opensuse-security-announce/2020-04/msg00004.html
vendor-advisory, mailing-list, third-party-advisory, advisory, web
-
lists.fedoraproject.org
/archives/list/package-announce%40lists.fedoraproject.org/message/4OOYAMJVLLCLXDTHW3V5UXNULZBBK4O6/
vendor-advisory, web
-
lists.debian.org
/debian-lts-announce/2020/03/msg00024.html
mailing-list, third-party-advisory, advisory, web
-
chromereleases.googleblog.com
/2020/02/stable-channel-update-for-desktop_24.html
third-party-advisory, advisory, web
-
bugs.chromium.org
/p/chromium/issues/detail?id=1044570
permissions-required, third-party-advisory, advisory, web
-
unicode-org.atlassian.net
/browse/ICU-20958
permissions-required, third-party-advisory, advisory, web
-
oracle.com
//security-alerts/cpujul2021.html
not-applicable, third-party-advisory, advisory, web
-
oracle.com
/security-alerts/cpuapr2022.html
third-party-advisory, advisory, web
- cert-portal.siemens.com /productcert/html/ssa-398330.html
-
nvd.nist.gov
/vuln/detail/CVE-2020-10531
web
Sources
- CVE List CVE-2020-10531
- NVD CVE-2020-10531
- OSV BIT-node-2020-10531
- OSV BIT-node-min-2020-10531
- OSV JLSEC-2026-58
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.