[UPDATE] [medium] International Components for Unicode (icu): Vulnerability enables code execution

A remote, anonymous attacker can exploit a vulnerability in International Components for Unicode (icu) to execute arbitrary code.

CSIRTS triage

What: A remote code execution vulnerability in International Components for Unicode (icu) allows unauthenticated attackers to execute arbitrary code.
Who is affected: Systems using affected versions of the icu library.
Urgency: Medium; remote code execution is serious but assessment depends on deployment exposure and library usage.
Action: Update to the latest patched version of icu library.

AI-assisted analysis generated from the source advisory — verify against the original.

⚡ Watch icu

Get an email when a new icu advisory drops — max one per day, one-click unsubscribe.

EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.

Low exploitation riskCVE-2025-52220.43% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 36% of all EPSS-scored CVEs.

CVE	CSIRTS overview	External
CVE-2025-5222	coverage & exploitation status	NVD · CVE.org

How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.