Description (CNA)
PCRE2 before 10.48 has a pcre2_match out-of-bounds read after a JIT fallback when an attacker can provide invalid UTF data.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| PCRE / PCRE2 | affected 10.34 before 10.48 |
CWE
CWE-125
References
- https://github.com/PCRE2Project/pcre2/releases/tag/pcre2-10.48
- https://github.com/PCRE2Project/pcre2/security/advisories/GHSA-2p8c-ff85-vh9x
ADP enrichment
No English description supplied.
No references supplied.