PCRE vulnerabilities
We track 3 vulnerabilities in PCRE products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on September 30, 2026.
3vulnerabilities
0critical
3high
0exploited
7.8average CVSS score
Latest PCRE vulnerabilities
- 7.6 High severity
PCRE2: Out-of-bounds Write
PCRE2 before 10.49, when there is an attacker-controlled regular expression and certain JIT API usage, allows an out-of-bounds write with arbitrary data.
- 8.2 High severity
PCRE2: Improper Protection of Alternate Path
PCRE2 before 10.48 allows a pcre2_dfa_match out-of-bounds write because reuse of a cached workspace block, in a recursive DFA matching workspace, lacks a size check (even though a newly allocated block, for the same purpose, does have a size check). This outco
- 7.5 High severity
Pcre2: Integer Overflow or Wraparound
Integer overflow vulnerability in pcre2test before 10.41 allows attackers to cause a denial of service or other unspecified impacts via negative input.