OESA-2026-3815 pcre2 security update

PCRE2 is a re-working of the original PCRE1 library to provide an entirely new API. Since its initial release in 2015, there has been further development of the code and it now differs from PCRE1 in more than just the API. PCRE2 is written in C, and it has its own API. There are three sets of...

CVE-2026-86145

PCRE2 versions before 10.48 are affected by an out-of-bounds write in pcre2_dfa_match . The root cause is that reuse of a cached workspace block in a recursive DFA matching workspace lacks a size check, whereas newly allocated blocks for the same purpose do include one. Exploitation requires eith...

CVE-2026-86145: Improper Protection of Alternate Path

PCRE2 before 10.48 allows a pcre2dfamatch out-of-bounds write because reuse of a cached workspace block, in a recursive DFA matching workspace, lacks a size check even though a newly allocated block, for the same purpose, does have a size check. This outcome requires an attacker-controlled regula...