Debian/pcre2: high 7.6
PCRE2 before 10.49, when there is an attacker-controlled regular expression and certain JIT API usage, allows an out-of-bounds write with arbitrary data.
Action: Upgrade pcre2 to 10.48-3.1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 10.48-3.1 | - |
Fixed versions
| 10.48-3.1 |
Sources
- osv: DEBIAN-CVE-2026-103111#Debian:14/pcre2
- https://security-tracker.debian.org/tracker/CVE-2026-103111
published · modified · JSON