An issue was discovered in International Components for Unicode (ICU) for C/C++ through 66.1. An integer overflow leading to a heap-based buffer overflow exists in the UnicodeString::doAppend() function in common/unistr.cpp.