PCRE2 vulnerabilities

3 known vulnerabilities in PCRE2 from PCRE. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.6 High severity

  PCRE2: Out-of-bounds Write

  CVE-2026-103111Sep 30, 2026PCRE

  PCRE2 before 10.49, when there is an attacker-controlled regular expression and certain JIT API usage, allows an out-of-bounds write with arbitrary data.

• 8.2 High severity

  PCRE2: Improper Protection of Alternate Path

  CVE-2026-86145Sep 5, 2026PCRE

  PCRE2 before 10.48 allows a pcre2_dfa_match out-of-bounds write because reuse of a cached workspace block, in a recursive DFA matching workspace, lacks a size check (even though a newly allocated block, for the same purpose, does have a size check). This outco

• 7.5 High severity

  Pcre2: Integer Overflow or Wraparound

  CVE-2022-41409Jul 18, 2023PCREEPSS 1.12%

  Integer overflow vulnerability in pcre2test before 10.41 allows attackers to cause a denial of service or other unspecified impacts via negative input.