PT-2025-34928 · Pcre2+3 · Pcre2+3
CVE-2025-58050
·
Published
2025-08-27
·
Updated
2026-07-27
CVSS v3.1
9.4
Critical
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H |
Name of the Vulnerable Software and Affected Versions:
PCRE2 library versions prior to 10.46
Description:
The PCRE2 library contains a heap-buffer-overflow read vulnerability in the regular expression matching engine. The issue occurs within the handling of the (*scs:...) (Scan SubString) verb when combined with (*ACCEPT) in src/pcre2 match.c. This may lead to information disclosure if the out-of-bounds data read during the
memcmp function affects the final match result.Recommendations:
Update to PCRE2 library version 10.46 or later.
Exploit
Fix
DoS
Heap Based Buffer Overflow
Out of bounds Read
Memory Corruption
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Alt Linux
Pcre2
Red Os
Ubuntu