CVE-2026-89160

PCRE2 before 10.48 has a pcre2match out-of-bounds read during the PCRE2MATCHINVALIDUTF matching of an invalid UTF subject...

CVE-2026-89156

PCRE2 before 10.48 has a pcre2match out-of-bounds read after a JIT fallback when an attacker can provide invalid UTF data...

CVE-2026-89160

PCRE2 versions before 10.48 are affected by an out-of-bounds read in the pcre2_match function, triggered when matching an invalid UTF-8 subject string with the PCRE2_MATCH_INVALID_UTF flag. The vulnerability results in a low availability impact (CVSS 3.7, HIGH attack complexity, no privileges req...

EUVD-2026-75945

PCRE2 before 10.48 has a pcre2match out-of-bounds read during the PCRE2MATCHINVALIDUTF matching of an invalid UTF subject...

EUVD-2026-75942

PCRE2 before 10.48 has a pcre2match out-of-bounds read after a JIT fallback when an attacker can provide invalid UTF data...

CVE-2026-89156

PCRE2 before 10.48 is affected by an out-of-bounds read in pcre2_match that occurs after a JIT fallback when an attacker can supply invalid UTF data . The CVSS 3.1 score is 2.9 (Low) , reflecting a local attack vector with high complexity, no required privileges, and a limited availability impact...

openSUSE Security Update : pcre2 (openSUSE-2016-966)

This update for pcre2 fixes the following issues : - pcre2 10.22 : - The POSIX wrapper function regcomp did not used to support back references and subroutine calls if called with the REGNOSUB option. It now does. - A new function, pcre2codecopy, is added, to make a copy of a compiled pattern. -...