REDHAT-BUG-2531744: Medium severity PCRE2 PCRE2 vulnerability

Q: Which systems are exposed to this issue?

The issue affects PCRE2 versions before 10.48 running on 32-bit platforms. Systems using a 64-bit platform are not identified as affected by the provided information.

Q: What does an attacker need to trigger the vulnerability?

An attacker must be able to provide a large pattern to the pcre2_pattern_convert function. The provided information does not state that ordinary small patterns can trigger the issue.

Q: What is the practical mitigation if an update cannot be applied immediately?

Restrict or prevent untrusted users from supplying large patterns to pcre2_pattern_convert. Running the affected software on a 64-bit platform is also outside the affected condition described here.

Published Sep 11, 2026

Updated

PCRE2 before 10.48, on 32-bit platforms, has a pcre2patternconvert out-of-bounds write when an attacker can provide a large pattern.

Affected Software

1 affected component

PCRE2 PCRE2<10.48

Event History

Sep 11, 2026

Data Sourced

via Red Hat·04:21 AM

DescriptionSeverityAffected Software

Frequently Asked Questions

Which systems are exposed to this issue?

The issue affects PCRE2 versions before 10.48 running on 32-bit platforms. Systems using a 64-bit platform are not identified as affected by the provided information.

What does an attacker need to trigger the vulnerability?

An attacker must be able to provide a large pattern to the pcre2_pattern_convert function. The provided information does not state that ordinary small patterns can trigger the issue.

What is the practical mitigation if an update cannot be applied immediately?

Restrict or prevent untrusted users from supplying large patterns to pcre2_pattern_convert. Running the affected software on a 64-bit platform is also outside the affected condition described here.

REDHAT-BUG-2531744: Medium severity PCRE2 PCRE2 vulnerability

Affected Software

Event History

Frequently Asked Questions

Which systems are exposed to this issue?

What does an attacker need to trigger the vulnerability?

What is the practical mitigation if an update cannot be applied immediately?

Company

Resources

Contact

Frequently Asked Questions

Which systems are exposed to this issue?

What does an attacker need to trigger the vulnerability?

What is the practical mitigation if an update cannot be applied immediately?