AZL-101814 CVE-2026-89158 affecting package rust for versions less than 1.96.0-1

🗓️ 11 Sep 2026 04:18:03Reported by GoogleType

osv🔗 osv.dev👁 10 Views

PCRE2 before 10.48 integer overflow in pcre2_compile_32 on 32-bit causing out-of-bounds write.

Reporter	Title	Published	Views	Family All 64
AlpineLinux	CVE-2026-89158	11 Sep 202604:07	–	alpinelinux
CBLMariner	CVE-2026-89158 affecting package pcre2 for versions less than 10.48-1	18 Sep 202614:58	–	cbl_mariner
CBLMariner	CVE-2026-89158 affecting package rust for versions less than 1.96.0-1	1 Sep 202602:21	–	cbl_mariner
Tenable Nessus	CentOS 9 : pcre2-10.40-7.el9	6 Oct 202600:00	–	nessus
Tenable Nessus	Fedora 45 : mingw-pcre2 (2026-68e2c40a81)	23 Sep 202600:00	–	nessus
Tenable Nessus	Fedora 43 : mingw-pcre2 (2026-98f3f016c4)	24 Sep 202600:00	–	nessus
Tenable Nessus	Fedora 44 : mingw-pcre2 (2026-e9c6062c07)	24 Sep 202600:00	–	nessus
Tenable Nessus	openSUSE 16: libpcre2-16-0 / libpcre2-32-0 / libpcre2-8-0 / libpcre2-posix3 / etc (openSUSE-SU-2026:21938-1)	26 Sep 202600:00	–	nessus
Tenable Nessus	SUSE SLES12: libpcre2-16-0 / libpcre2-32-0 / libpcre2-8-0 / libpcre2-posix2 / etc (SUSE-SU-2026:4201-1)	17 Sep 202600:00	–	nessus
Tenable Nessus	SUSE SLED15: libpcre2-16-0 / libpcre2-32-0 / libpcre2-8-0 / libpcre2-8-0-32bit / etc (SUSE-SU-2026:4241-1)	18 Sep 202600:00	–	nessus

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-89158

11 Oct 2026 05:36Current

5.9Medium risk

Vulners AI Score5.9

CVSS 3.16.5

EPSS0.00247

SSVC

PCRE2 pcre2_compile_32 integer overflow out-of-bounds write 32-bit rust