JLSEC-2026-176

🗓️ 22 Apr 2026 20:20:10Reported by GoogleType

osv🔗 osv.dev👁 2 Views

Libpcre PCRE before 8.43 permits JIT buffer over-read when UTF is off and \X or \R has multiple fixed quantifiers.

Reporter	Title	Published	Views	Family All 95
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified inPCRE, which is a required product for IBM Tivoli Network Manager IP Edition (CVE-2019-20838)	4 Jan 202110:17	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Aspera Console has addressed multiple PCRE and PCRE2 library vulnerabilities (CVE-2022-1587, CVE-2019-20838, CVE-2022-1586)	29 May 202420:37	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities fixed in Cloud Pak for Automation components	19 Jan 202216:26	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Connect:Direct for UNIX Certified Container is affected by multiple vulnerabilities in Red Hat Universal Base Image version 8.4-206.1626828523 and Binutils version 2.30-93	14 Mar 202220:12	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Aspera Shares is vulnerable to multiple high severity vulnerabilities (CVE-2022-1586, CVE-2022-4304, CVE-2023-0215, CVE-2023-0286, CVE-2019-20838, CVE-2022-2068, CVE-2022-1587)	5 Feb 202517:01	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Security includes components with multiple known vulnerabilities	19 Jan 202313:54	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM is vulnerable to using components with Known Vulnerabilities	25 Apr 202214:44	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Aspera Faspex 4.4.2 has addressed multiple security vulnerabilities	7 Sep 202223:27	–	ibm
Tenable Nessus	AlmaLinux 8 : pcre (ALSA-2021:4373)	9 Feb 202200:00	–	nessus
Tenable Nessus	CentOS 8 : pcre (CESA-2021:4373)	11 Nov 202100:00	–	nessus

Source	Link
seclists	www.seclists.org/fulldisclosure/2020/Dec/32
seclists	www.seclists.org/fulldisclosure/2020/Dec/32
seclists	www.seclists.org/fulldisclosure/2021/Feb/14
seclists	www.seclists.org/fulldisclosure/2021/Feb/14
bugs	www.bugs.gentoo.org/717920
bugs	www.bugs.gentoo.org/717920
lists	www.lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E
lists	www.lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E
support	www.support.apple.com/kb/HT211931
support	www.support.apple.com/kb/HT211931

22 Apr 2026 20:30Current

6.3Medium risk

Vulners AI Score6.3

CVSS 24.3

CVSS 3.17.5

EPSS0.00234