CVE-2026-103111

The PCRE2 library, specifically versions prior to 10.49 , is vulnerable to an out-of-bounds write with arbitrary data. This flaw occurs when an application processes attacker-controlled regular expressions using specific Just-In-Time (JIT) compiler interfaces . A successful exploit could allow an...

EUVD-2026-89608

PCRE2 before 10.49, when there is an attacker-controlled regular expression and certain JIT API usage, allows an out-of-bounds write with arbitrary data...