CVE-2014-8146

CVE-2014-8146 is a heap-based buffer overflow vulnerability in the Unicode Bidirectional Algorithm implementation of ICU4C, affecting International Components for Unicode (ICU) versions before 55.1, including various Apple products. With a CVSS score of 7.5, this high-severity flaw allows remote attackers to cause a denial of service or potentially execute arbitrary code through crafted text, requiring low attack complexity and no authentication. While not listed in CISA's KEV catalog, an ExploitDB entry exists (EDB-43887) for multiple ICU vulnerabilities, though there is no evidence of active exploitation, Metasploit modules, or significant community discussion.