Threats Tagged 'cve-2026-86145'

Multiple vulnerabilities in the pcre2 library used by Red Hat Enterprise Linux 8 allow out-of-bounds reads and writes, integer overflow, incorrect memory free operations, and information disclosure. These issues affect various functions including pcre2_dfa_match, JIT fallback, pcre2_compile_32 on 32-bit platforms, and pcre2_serialize_encode. The vulnerabilities can lead to memory corruption and potential information leakage. Red Hat has released security updates addressing these issues.

A security update addresses an out-of-bounds read and write vulnerability in the libpcap library, which is used for low-level network monitoring. This vulnerability (CVE-2026-0799) allows arbitrary memory access. The issue affects multiple Red Hat Enterprise Linux 10 and related CodeReady Linux Builder products across various architectures. Red Hat has released an important security advisory with updated libpcap packages to fix this vulnerability.

Red Hat has released a security advisory for Red Hat Hardened Images RPMs addressing a vulnerability identified as CVE-2026-103111. The issue is related to the pcre2 packages and is categorized under CWE-787, indicating a potential out-of-bounds write vulnerability. The advisory does not provide detailed technical information or specify affected versions. No known exploits are reported in the wild. An update to version 10.49-0.1.hum1 of multiple pcre2-related RPMs is available and should be applied to mitigate the vulnerability.

Multiple security vulnerabilities have been identified and fixed in the pcre2 library. These include out-of-bounds reads and writes, integer overflow, incorrect memory free operations, and information disclosure issues. The flaws affect various functions such as pcre2_dfa_match, pcre2_compile_32, and pcre2_serialize_encode. These vulnerabilities can lead to memory corruption and potential information leaks. The update addresses seven distinct CVEs related to these issues.

CVE-2026-86145 is a high-severity vulnerability in PCRE2 versions 10.32 up to but not including 10.48. It involves an out-of-bounds write in the pcre2_dfa_match function due to improper size checking when reusing a cached workspace block during recursive DFA matching. Exploitation requires an attacker-controlled regular expression or a recursive pattern combined with a small heap limit set via the API.