UBUNTU-CVE-2026-89158: Integer Overflow
Published Sep 11, 2026
·Updated
PCRE2 before 10.48, on 32-bit platforms, has a pcre2compile32 integer overflow and resultant out-of-bounds write.
Affected Software
7 affected components
ubuntu/pcre2*
ubuntu/pcre2*
ubuntu/pcre2*
ubuntu/pcre2*
ubuntu/pcre2*
ubuntu/pcre2*
ubuntu/pcre2*
Event History
Sep 11, 2026
CVE Published
via OSV·04:18 AM
Data Sourced
via OSV·04:18 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
Which systems are exposed to this issue?
The issue affects PCRE2 installations earlier than 10.48 running on 32-bit platforms. The provided data identifies Ubuntu's pcre2 package as the affected software.
2
What must an attacker do to exploit it?
An attacker would need network access and a way to cause the affected PCRE2 component to compile input that triggers the integer overflow. No privileges or user interaction are required, but the attack complexity is rated high.
3
What is the potential impact?
Successful exploitation can cause an out-of-bounds write resulting from an integer overflow in pcre2_compile_32. The reported impact is integrity loss and limited availability impact, with no confidentiality impact listed.