Buffer Over-read in PCRE Library Affecting Multiple Platforms
CVE-2019-20838

7.5HIGH

Key Information:

Vendor: Pcre
Status: Pcre
Vendor: CVE Published:; 15 June 2020

What is CVE-2019-20838?

A vulnerability exists in the PCRE library (libpcre) where an over-read of the subject buffer can occur in JIT (Just-In-Time) compilation when UTF is disabled, particularly if certain quantifiers are used in the pattern. This issue may lead to unexpected behaviors or security implications, as it allows for potential memory leaks or exposure of sensitive data. Developers using affected versions should consider upgrading to protect their applications from related issues.