Copyright © 2012 Red Hat, Inc. All rights reserved. Moderate 2026-09-11T04:07:21 PCRE2: PCRE2: Out-of-bounds write via integer overflow on 32-bit platforms 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L CWE-787

PCRE2 before 10.48, on 32-bit platforms, has a pcre2_compile_32 integer overflow and resultant out-of-bounds write.

A flaw was found in PCRE2. On 32-bit platforms, an integer overflow in the `pcre2_compile_32` function can lead to an out-of-bounds write. This vulnerability could allow a remote attacker to achieve a high integrity impact and a low availability impact, potentially leading to data corruption or denial of service.

A Moderate impact flaw was found in PCRE2 affecting 32-bit platforms, where an integer overflow in the `pcre2_compile_32` function can lead to an out-of-bounds write. While exploitable over the network without requiring user interaction or privileges, the high attack complexity reduces its overall severity. Successful exploitation could result in high integrity impact, such as data corruption, or a low availability impact, leading to a denial of service. Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability. Red Hat Hardened Images 2026-09-15T00:00:00Z RHSA-2026:67534 pcre2-main-10.48-0.1.hum1 Red Hat Enterprise Linux 10 Fix deferred bootc Red Hat Enterprise Linux 10 Fix deferred mariadb10.11 Red Hat Enterprise Linux 10 Fix deferred mariadb11.8 Red Hat Enterprise Linux 10 Fix deferred mingw-pcre2 Red Hat Enterprise Linux 10 Affected pcre2 Red Hat Enterprise Linux 7 Fix deferred pcre2 Red Hat Enterprise Linux 8 Fix deferred mariadb:10.11/mariadb Red Hat Enterprise Linux 8 Affected pcre2 Red Hat Enterprise Linux 9 Fix deferred bootc Red Hat Enterprise Linux 9 Fix deferred mariadb:10.11/mariadb Red Hat Enterprise Linux 9 Fix deferred mariadb:11.8/mariadb Red Hat Enterprise Linux 9 Fix deferred mingw-pcre2 Red Hat Enterprise Linux 9 Affected pcre2 Red Hat Hardened Images Not affected rust Red Hat OpenShift Container Platform 4 Fix deferred openshift/ose-rhel-coreos-8 Red Hat OpenShift Container Platform 4 Fix deferred openshift/ose-rhel-coreos-9 https://www.cve.org/CVERecord?id=CVE-2026-89158 https://nvd.nist.gov/vuln/detail/CVE-2026-89158 https://github.com/PCRE2Project/pcre2/releases/tag/pcre2-10.48 https://github.com/PCRE2Project/pcre2/security/advisories/GHSA-fmgr-6ggq-9859