Threats Tagged 'ubuntu-cve-2026-86145'

This security update for pcre2 addresses multiple vulnerabilities including out-of-bounds reads and writes, integer overflow, incorrect memory free operations, and information disclosure. The issues affect functions such as pcre2_dfa_match, JIT fallback, pcre2_compile_32 on 32-bit platforms, and pcre2_serialize_encode. The update fixes these vulnerabilities to prevent potential memory corruption and information leakage.

CVE-2026-86145 is a high-severity vulnerability in PCRE2 versions 10.32 up to but not including 10.48. It involves an out-of-bounds write in the pcre2_dfa_match function due to improper size checking when reusing a cached workspace block during recursive DFA matching. Exploitation requires an attacker-controlled regular expression or a recursive pattern combined with a small heap limit set via the API.