It was discovered that the International Components for Unicode (ICU)
library mishandles converter names starting with x-
, which allows
remote attackers to cause a denial of service (read of uninitialized
memory) or possibly have unspecified other impact via a crafted file.