low2.9
CVE-2026-89156
PCRE2 before 10.48 has a pcre2_match out-of-bounds read after a JIT fallback when an attacker can provide invalid UTF data.
Impact
PCRE2 before 10.48 has a pcre2_match out-of-bounds read after a JIT fallback when an attacker can provide invalid UTF data.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Pcre | Pcre2 | before 10.48 Version 10.48 |