Heap-buffer-overflow in pcre2_compile_32
Description
A heap-buffer-overflow vulnerability was identified in the pcre2 library's pcre2_compile_32 function. The issue was reported by OSS-Fuzz and involves a write operation that exceeds the allocated heap buffer. No specific affected versions or patches are provided in the available data. There is no evidence of known exploits in the wild at this time.
Affected software
pkg:generic/pcre2Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The vulnerability is a heap-buffer-overflow triggered during the execution of the pcre2_compile_32 function in the pcre2 library, as reported by OSS-Fuzz. The crash involves a write of 4 bytes beyond the allocated heap buffer, which could potentially lead to memory corruption. The report does not specify affected versions or provide details on remediation or patches. No CVSS score or detailed impact metrics are available.
Potential Impact
Heap-buffer-overflow vulnerabilities can lead to memory corruption, which may cause application crashes or potentially enable arbitrary code execution depending on the context. However, no active exploitation or known exploits have been reported for this issue. The exact impact depends on how the vulnerable function is used within applications.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should monitor official pcre2 project communications and OSS-Fuzz reports for updates. No specific mitigation steps are provided in the current data.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- OSV-2026-343
- Osv Schema Version
- 1.7.5
- Ecosystems
- ["OSS-Fuzz"]
Threat ID: 6a95a0d9acd9273b494784df
Added to database: 08/31/2026, 15:42:17 UTC
Last enriched: 09/09/2026, 11:53:55 UTC
Last updated: 10/01/2026, 22:34:46 UTC
Views: 28
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.