REDHAT-BUG-2531745: Low severity PCRE2 PCRE2 vulnerability

Q: What conditions are required to trigger the out-of-bounds read?

The issue occurs when pcre2_match processes an invalid UTF subject while using the PCRE2_MATCH_INVALID_UTF matching mode. The provided data does not identify any other prerequisite or attack vector.

Q: Which versions are affected?

PCRE2 versions before 10.48 are affected. Version 10.48 or later is not identified as affected by the description.

Q: How can exposure be reduced if an update cannot be applied immediately?

Avoid processing invalid UTF subjects with pcre2_match when PCRE2_MATCH_INVALID_UTF is enabled. The provided data does not specify other mitigations or configuration changes.

Published Sep 11, 2026

Updated

PCRE2 before 10.48 has a pcre2match out-of-bounds read during the PCRE2MATCHINVALIDUTF matching of an invalid UTF subject.

Affected Software

1 affected component

PCRE2 PCRE2<10.48

Event History

Sep 11, 2026

Data Sourced

via Red Hat·04:21 AM

DescriptionSeverityAffected Software

Frequently Asked Questions

What conditions are required to trigger the out-of-bounds read?

The issue occurs when pcre2_match processes an invalid UTF subject while using the PCRE2_MATCH_INVALID_UTF matching mode. The provided data does not identify any other prerequisite or attack vector.

Which versions are affected?

PCRE2 versions before 10.48 are affected. Version 10.48 or later is not identified as affected by the description.

How can exposure be reduced if an update cannot be applied immediately?

Avoid processing invalid UTF subjects with pcre2_match when PCRE2_MATCH_INVALID_UTF is enabled. The provided data does not specify other mitigations or configuration changes.

REDHAT-BUG-2531745: Low severity PCRE2 PCRE2 vulnerability

Affected Software

Event History

Frequently Asked Questions

What conditions are required to trigger the out-of-bounds read?

Which versions are affected?

How can exposure be reduced if an update cannot be applied immediately?

Company

Resources

Contact

Frequently Asked Questions

What conditions are required to trigger the out-of-bounds read?

Which versions are affected?

How can exposure be reduced if an update cannot be applied immediately?