Out-of-Bounds Write Vulnerability in PCRE2 by PCRE2Project
CVE-2026-89157

5.7MEDIUM

Key Information:

Vendor

Pcre

Status
Vendor
CVE Published:
11 September 2026

What is CVE-2026-89157?

PCRE2 versions prior to 10.48 on 32-bit platforms are susceptible to an out-of-bounds write issue triggered by a large pattern submitted by an attacker. This could lead to memory corruption, resulting in potential system instability and vulnerabilities that could be exploited to execute arbitrary code. Users of outdated versions are strongly encouraged to upgrade to mitigate risks associated with this vulnerability.

Affected Version(s)

PCRE2 10.30 < 10.48

References

CVSS V3.1

Score:
5.7
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.