EUVD-2022-24876

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType

Out-of-bounds read vulnerability in PCRE2 affects unicode property matching in JIT-compiled regex.

Reporter	Title	Published	Views	Family All 151
IBM Security Bulletins	Security Bulletin:IBM MQ Operator and Queue manager container images are vulnerable to multiple vulnerabilities from openssl, pcre2 and Golang Go	31 Aug 202216:17	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Aspera Console has addressed multiple PCRE and PCRE2 library vulnerabilities (CVE-2022-1587, CVE-2019-20838, CVE-2022-1586)	29 May 202420:37	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Security includes components with multiple known vulnerabilities	7 Jun 202316:53	–	ibm
IBM Security Bulletins	Security Bulletin: Netcool Operations Insight v1.6.7 contains fixes for multiple security vulnerabilities.	15 Dec 202209:13	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container operands may be vulnerable to arbitrary code execution due to CVE-2022-1586	7 Nov 202210:43	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Aspera Shares is vulnerable to multiple high severity vulnerabilities (CVE-2022-1586, CVE-2022-4304, CVE-2023-0215, CVE-2023-0286, CVE-2019-20838, CVE-2022-2068, CVE-2022-1587)	5 Feb 202517:01	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM Application Framework Base Image is vulnerable to using components with Known Vulnerabilities	27 Feb 202317:34	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to arbitrary code execution in PCRE2 (CVE-2022-1586)	12 Jan 202321:59	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Aspera Orchestrator affected by vulnerability (CVE-2022-1586)	2 Feb 202320:50	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities may affect IBM Robotic Process Automation for Cloud Pak	24 Oct 202220:10	–	ibm

[
  {
    "enisaIdVendor": [
      {
        "id": "12411178-3503-3435-81ef-5eefd3440d3a",
        "vendor": {
          "name": "n/a"
        }
      }
    ]
  }
]

Source	Link
suse	www.suse.com/security/cve/CVE-2022-1586.html
access	www.access.redhat.com/errata/RHSA-2022:5251
access	www.access.redhat.com/errata/RHSA-2022:5809
advisories	www.advisories.mageia.org/CVE-2022-1586.html
ubuntu	www.ubuntu.com/security/CVE-2022-1586
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M2GLQQUEY5VFM57CFYXVIFOXN2HUZPDM/
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
github	www.github.com/PCRE2Project/pcre2/commit/50a51cb7e67268e6ad417eb07c9de9bfea5cc55a%2C
github	www.github.com/PCRE2Project/pcre2/commit/d4fa336fbcc388f89095b184ba6d99422cfc676c
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KAX7767BCUFC7JMDGP7GOQ5GIZCAUGBB/

03 Oct 2025 20:07Current

7.4High risk

Vulners AI Score7.4

CVSS 3.19.1

CVSS 26.4

EPSS0.00584