CVE-2026-89160

PCRE2 versions before 10.48 are affected by an out-of-bounds read in the pcre2_match function, triggered when matching an invalid UTF-8 subject string with the PCRE2_MATCH_INVALID_UTF flag. The vulnerability results in a low availability impact (CVSS 3.7, HIGH attack complexity, no privileges req...

EUVD-2026-75945

PCRE2 before 10.48 has a pcre2match out-of-bounds read during the PCRE2MATCHINVALIDUTF matching of an invalid UTF subject...