In PCRE2 before 10.48, pcre2_serialize_encode might disclose two bytes to an adversary, typically in a situation where the access available to the adversary is already unsafe.

A flaw was found in PCRE2. The `pcre2_serialize_encode` function might disclose two bytes of information to an attacker. This vulnerability typically occurs in scenarios where the attacker already has unsafe access to the system, making exploitation difficult. The primary impact is a limited information disclosure.

This is a information disclosure flaw in PCRE2. The vulnerability, which could expose two bytes of data, requires an adversary to have already gained unsafe access to the system, significantly limiting its exploitability in typical Red Hat deployments. Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability. Red Hat Hardened Images 2026-09-15T00:00:00Z RHSA-2026:67534 pcre2-main-10.48-0.1.hum1 Red Hat Enterprise Linux 10 Not affected bootc Red Hat Enterprise Linux 10 Fix deferred mariadb10.11 Red Hat Enterprise Linux 10 Fix deferred mariadb11.8 Red Hat Enterprise Linux 10 Not affected mingw-pcre2 Red Hat Enterprise Linux 10 Not affected pcre2 Red Hat Enterprise Linux 7 Not affected pcre2 Red Hat Enterprise Linux 8 Fix deferred mariadb Red Hat Enterprise Linux 8 Not affected pcre2 Red Hat Enterprise Linux 9 Not affected bootc Red Hat Enterprise Linux 9 Fix deferred mariadb Red Hat Enterprise Linux 9 Not affected mingw-pcre2 Red Hat Enterprise Linux 9 Not affected pcre2 Red Hat Hardened Images Not affected rust Red Hat OpenShift Container Platform 4 Not affected openshift/ose-rhel-coreos-8 Red Hat OpenShift Container Platform 4 Not affected openshift/ose-rhel-coreos-9 https://www.cve.org/CVERecord?id=CVE-2026-89162 https://nvd.nist.gov/vuln/detail/CVE-2026-89162 https://github.com/PCRE2Project/pcre2/releases/tag/pcre2-10.48 https://github.com/PCRE2Project/pcre2/security/advisories/GHSA-q7rw-r7qq-2hx6