{"schema_version":"1.7.5","id":"CVE-2020-21913","published":"2021-09-20T14:15:08.160Z","modified":"2026-07-08T05:56:36.092059834Z","related":["SUSE-SU-2022:3140-1","SUSE-SU-2022:3141-1","SUSE-SU-2022:3142-1","SUSE-SU-2023:3563-1","SUSE-SU-2023:3563-2","SUSE-SU-2023:3563-3","SUSE-SU-2025:02079-1","openSUSE-SU-2024:13127-1"],"details":"International Components for Unicode (ICU-20850) v66.1 was discovered to contain a use after free bug in the pkg_createWithAssemblyCode function in the file tools/pkgdata/pkgdata.cpp.","affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/unicode-org/icu","events":[{"introduced":"0"},{"fixed":"5f681ecbc75898a6484217b322f3883b6d1b2049"}],"database_specific":{"cpe":"cpe:2.3:a:unicode:international_components_for_unicode:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"0"},{"fixed":"66.1"}],"source":"CPE_RANGE"}}],"versions":["release-66-rc","release-66-preview","release-65-rc","release-64-rc","release-63-rc","last-svn-commit","release-62-rc","release-61-rc","release-60-rc","cldr-32-beta2","milestone-60-0-1","release-59-rc","milestone-59-0-1","last-cvs-commit"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-21913.json"}}],"references":[{"type":"ADVISORY","url":"https://lists.debian.org/debian-lts-announce/2021/10/msg00008.html"},{"type":"ADVISORY","url":"https://www.debian.org/security/2021/dsa-5014"},{"type":"FIX","url":"https://github.com/unicode-org/icu/pull/886"},{"type":"EVIDENCE","url":"https://unicode-org.atlassian.net/browse/ICU-20850"}],"database_specific":{"unresolved_ranges":[{"cpes":["cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*","cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"9.0"},{"last_affected":"9.0"},{"introduced":"10.0"},{"last_affected":"10.0"}],"source":"CPE_STRING","vendor_product":"debian:debian_linux"}]},"severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"}]}