Threats tagged 'oesa-2026-4111'

CVE-2026-89156 is an out-of-bounds read vulnerability in the PCRE2 library's pcre2_match function triggered after a JIT fallback when invalid UTF data is provided. PCRE2 is a C library for regular expression matching with separate 8-bit, 16-bit, and 32-bit APIs. This vulnerability affects versions from 10.34 up to but not including 10.48. The CVSS score is 2.9, indicating low severity for this specific issue. Multiple related vulnerabilities in PCRE2 before 10.48 address out-of-bounds reads and writes, integer overflows, and incorrect memory frees. The vendor has fixed these issues in version 10.48.