PT-2026-21404
CVE-2026-2903
·
Published
2026-02-22
·
Updated
2026-02-26
Description by
CVSS 3.1
3.3
LowMetricsAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
Name of the Vulnerable Software and Affected Versions
re2c versions up to 4.4
Description
A flaw exists in re2c that can lead to a null pointer dereference. The issue is located in the
check and merge special rules function within the src/parse/ast.cc file. This manipulation can be exploited locally. An exploit has been published and may be used.Recommendations
Install the patch febeb977936f9519a25d9fbd10ff8256358cdb97 to address this issue.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾