Description (CNA)
PCRE2 before 10.48 allows a pcre2_dfa_match out-of-bounds write because reuse of a cached workspace block, in a recursive DFA matching workspace, lacks a size check (even though a newly allocated block, for the same purpose, does have a size check). This outcome requires an attacker-controlled regular expression, or a recursive pattern in conjunction with a small heap limit (this can be set through the API).
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| PCRE / PCRE2 | affected 10.32 before 10.48 |
CWE
CWE-424
References
- https://github.com/PCRE2Project/pcre2/security/advisories/GHSA-3r4p-g7gg-ppmf
- https://github.com/PCRE2Project/pcre2/releases/tag/pcre2-10.48
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.