PCRE2 before version 10.48 on 32-bit platforms contains an integer overflow vulnerability in the pcre2_compile_32 function. This overflow can cause an out-of-bounds write, potentially leading to integrity impacts. The CVSS 3.1 base score is 6.5, with network attack vector, high attack complexity, no privileges required, no user interaction, unchanged scope, no confidentiality impact, high integrity impact, and low availability impact.

The vulnerability allows an attacker to cause an out-of-bounds write due to an integer overflow, which can impact the integrity of the affected system. There is no confidentiality or availability impact reported. Exploitation requires network access with high complexity and no privileges or user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch links are provided in the available data. Users should monitor vendor communications for updates and apply patches once available.