9 matches found
MGASA-2026-0478 Updated mingw-pcre2 & pcre2 packages fix security vulnerabilities
PCRE2 before 10.48 allows a pcre2dfamatch out-of-bounds write because reuse of a cached workspace block, in a recursive DFA matching workspace, lacks a size check even though a newly allocated block, for the same purpose, does have a size check. This outcome requires an attacker-controlled regula...
CVE-2026-103111
PCRE2 before 10.49, when there is an attacker-controlled regular expression and certain JIT API usage, allows an out-of-bounds write with arbitrary data...
WS-2026-0074
PCRE2 10.48 and earlier: JIT matching with a growable JIT stack pcre2jitstackcreate/pcre2jitstackassign can write out of bounds. The stack-resize path grows the stack limit by a fixed step without re-checking a larger frame allocation, so an attacker-controlled pattern with high JIT stack usage...
CVE-2026-89161
In PCRE2 before 10.48, pcre2jitmatch mishandles a previously copied subject being passed in as a context. An incorrect free operation can occur...
CVE-2026-89161
In PCRE2 before 10.48, pcre2jitmatch mishandles a previously copied subject being passed in as a context. An incorrect free operation can occur...
CVE-2026-89161
In PCRE2 before 10.48, pcre2jitmatch mishandles a previously copied subject being passed in as a context. An incorrect free operation can occur...
CVE-2026-89161
In PCRE2 before 10.48, pcre2jitmatch mishandles a previously copied subject being passed in as a context. An incorrect free operation can occur...
