REDHAT-BUG-2531746: Integer Overflow

Q: Which systems are affected?

The issue affects PCRE2 versions before 10.48 when they run on 32-bit platforms. The provided information does not indicate an impact on 64-bit platforms.

Q: What condition is required to trigger the vulnerability?

The overflow occurs in the pcre2_compile_32 component during compilation. Exploitation would require reaching that code path on an affected 32-bit PCRE2 installation.

Q: How can I determine whether my deployment is potentially affected?

Check whether the system is 32-bit and whether its installed PCRE2 version is earlier than 10.48. Systems meeting both conditions are potentially affected.

Published Sep 11, 2026

Updated

PCRE2 before 10.48, on 32-bit platforms, has a pcre2compile32 integer overflow and resultant out-of-bounds write.

Affected Software

1 affected component

PCRE2 PCRE2<10.48

Event History

Sep 11, 2026

Data Sourced

via Red Hat·04:21 AM

DescriptionSeverityAffected Software

Frequently Asked Questions

Which systems are affected?

The issue affects PCRE2 versions before 10.48 when they run on 32-bit platforms. The provided information does not indicate an impact on 64-bit platforms.

What condition is required to trigger the vulnerability?

The overflow occurs in the pcre2_compile_32 component during compilation. Exploitation would require reaching that code path on an affected 32-bit PCRE2 installation.

How can I determine whether my deployment is potentially affected?

Check whether the system is 32-bit and whether its installed PCRE2 version is earlier than 10.48. Systems meeting both conditions are potentially affected.

REDHAT-BUG-2531746: Integer Overflow

Affected Software

Event History

Frequently Asked Questions

Which systems are affected?

What condition is required to trigger the vulnerability?

How can I determine whether my deployment is potentially affected?

Company

Resources

Contact

Frequently Asked Questions

Which systems are affected?

What condition is required to trigger the vulnerability?

How can I determine whether my deployment is potentially affected?