CVE-2025-58050

Name of the Vulnerable Software and Affected Versions: PCRE2 library versions prior to 10.46

Description: The PCRE2 library contains a heap-buffer-overflow read vulnerability in the regular expression matching engine. The issue occurs within the handling of the (*scs:...) (Scan SubString) verb when combined with (*ACCEPT) in src/pcre2 match.c. This may lead to information disclosure if the out-of-bounds data read during the memcmp function affects the final match result.

Recommendations: Update to PCRE2 library version 10.46 or later.