CVE-2026-89158

Name
CVE-2026-89158
Description
PCRE2 before 10.48, on 32-bit platforms, has a pcre2_compile_32 integer overflow and resultant out-of-bounds write.
NVD Severity
unknown
Other trackers
CVE, NVD, CERT, CVE Details, CIRCL, Arch Linux, Debian, Red Hat, Ubuntu, Gentoo, SUSE (Bugzilla), SUSE (CVE), Mageia
Mailing lists
oss-security, full-disclosure, bugtraq
Exploits
Exploit DB, Metasploit
Forges
GitHub (code, issues), Aports (code, issues)

References

Type URI
cve@mitre.org https://github.com/PCRE2Project/pcre2/releases/tag/pcre2-10.48
cve@mitre.org https://github.com/PCRE2Project/pcre2/security/advisories/GHSA-fmgr-6ggq-9859

Match rules

CPE URI Source package Min version Max version
cpe:2.3:a:pcre:pcre2:*:*:*:*:*:*:*:* pcre2 >= None < 10.48

Vulnerable and fixed packages

Source package Branch Version Maintainer Status
pcre2 edge-main 10.48-r0 Jakub Jirutka <jakub@jirutka.cz> fixed
pcre2 edge-main 10.47-r1 Jakub Jirutka <jakub@jirutka.cz> possibly vulnerable
pcre2 edge-main 10.47-r0 Jakub Jirutka <jakub@jirutka.cz> possibly vulnerable
pcre2 edge-main 10.46-r0 Jakub Jirutka <jakub@jirutka.cz> possibly vulnerable
pcre2 edge-main 10.45-r0 Jakub Jirutka <jakub@jirutka.cz> possibly vulnerable
pcre2 edge-main 10.43-r1 Jakub Jirutka <jakub@jirutka.cz> possibly vulnerable
pcre2 edge-main 10.43-r0 Jakub Jirutka <jakub@jirutka.cz> possibly vulnerable
pcre2 edge-main 10.41-r0 Jakub Jirutka <jakub@jirutka.cz> possibly vulnerable
pcre2 edge-main 10.40-r0 Jakub Jirutka <jakub@jirutka.cz> possibly vulnerable
pcre2 3.24-main 10.48-r0 Jakub Jirutka <jakub@jirutka.cz> fixed
pcre2 3.24-main 10.47-r1 Jakub Jirutka <jakub@jirutka.cz> possibly vulnerable
pcre2 3.23-main 10.48-r0 Jakub Jirutka <jakub@jirutka.cz> fixed
pcre2 3.23-main 10.47-r0 Jakub Jirutka <jakub@jirutka.cz> possibly vulnerable
pcre2 3.22-main 10.46-r0 Jakub Jirutka <jakub@jirutka.cz> possibly vulnerable
pcre2 3.22-main 10.43-r1 Jakub Jirutka <jakub@jirutka.cz> possibly vulnerable
pcre2 3.22-main 10.41-r0 None possibly vulnerable
pcre2 3.22-main 10.40-r0 None possibly vulnerable
pcre2 3.21-main 10.43-r0 Jakub Jirutka <jakub@jirutka.cz> possibly vulnerable
pcre2 3.21-main 10.41-r0 None possibly vulnerable
pcre2 3.21-main 10.40-r0 None possibly vulnerable
pcre2 3.20-main 10.43-r0 Jakub Jirutka <jakub@jirutka.cz> possibly vulnerable
pcre2 3.20-main 10.41-r0 None possibly vulnerable
pcre2 3.20-main 10.40-r0 None possibly vulnerable
pcre2 3.19-main 10.42-r2 Jakub Jirutka <jakub@jirutka.cz> possibly vulnerable
pcre2 3.19-main 10.41-r0 None possibly vulnerable
pcre2 3.19-main 10.40-r0 None possibly vulnerable