high7.6
CVE-2026-103111
PCRE2 before 10.49, when there is an attacker-controlled regular expression and certain JIT API usage, allows an out-of-bounds write with arbitrary data.
Impact
PCRE2 before 10.49, when there is an attacker-controlled regular expression and certain JIT API usage, allows an out-of-bounds write with arbitrary data.
Affected products
| Product | Affected versions |
|---|---|
| PCRE2 | before 10.49 |
Versions were read from the advisory text. No structured product data has been published for this record yet.