{"action":"Upgrade icu to 52.1-7.1 or later.","affected":[{"fixed":"52.1-7.1","introduced":"0"}],"component":"icu","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:12","exploited":false,"fixed_versions":["52.1-7.1"],"id":"tcs_01M5NAXS28NRTD70T4H34ZYCM0","modified_at":"2026-10-23T15:47:25.428857782Z","published_at":"2015-01-22T22:59:20.880Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2014-7940","https://security-tracker.debian.org/tracker/CVE-2014-7940"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2014-7940","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2014-7940"}],"summary":"The collator implementation in i18n/ucol.cpp in International Components for Unicode (ICU) 52 through SVN revision 293126, as used in Google Chrome before 40.0.2214.91, does not initialize memory for"}