This vulnerability in kokke tiny-regex-c up to commit f2632c6d9ed25272987471cdb8b70395c2460bdb involves inefficient regular expression complexity in the matchstar function of the re.c component. The flaw can be triggered locally, causing performance issues due to excessive computational complexity in regex processing. The vulnerability has been publicly disclosed, and an exploit is available, but it requires local access and limited privileges. No official remediation or patch has been announced, and the rolling release nature of the project prevents clear version identification for affected or fixed releases.

The vulnerability can cause inefficient regular expression processing leading to potential denial of service or performance degradation on the affected system. Exploitation is limited to local attackers with low privileges and does not require user interaction. There is no indication of remote exploitation or data compromise. The impact is primarily on system availability or responsiveness.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded and no official fix is available, users should monitor the project repository or vendor communications for updates. Until a fix is released, restricting local access to trusted users may reduce risk.