Pcre2 vulnerabilities
We track 2 vulnerabilities in Pcre2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on May 16, 2022.
2vulnerabilities
2critical
0high
0exploited
9.1average CVSS score
Latest Pcre2 vulnerabilities
- 9.1 Critical severity
pcre2: Out-of-bounds Read
An out-of-bounds read vulnerability was discovered in the PCRE2 library in the get_recurse_data_length() function of the pcre2_jit_compile.c file. This issue affects recursions in JIT-compiled regular expressions caused by duplicate data transfers.
- 9.1 Critical severity
pcre2: Out-of-bounds Read
An out-of-bounds read vulnerability was discovered in the PCRE2 library in the compile_xclass_matchingpath() function of the pcre2_jit_compile.c file. This involves a unicode property matching issue in JIT-compiled regular expressions. The issue occurs because