Description (CNA)
PCRE2 before 10.48, on 32-bit platforms, has a pcre2_pattern_convert out-of-bounds write when an attacker can provide a large pattern.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| PCRE / PCRE2 | affected 10.30 before 10.48 |
CWE
CWE-190
References
- https://github.com/PCRE2Project/pcre2/releases/tag/pcre2-10.48
- https://github.com/PCRE2Project/pcre2/security/advisories/GHSA-q8g2-wprr-34m9
ADP enrichment
No English description supplied.