CVE-2026-89156

Name of the Vulnerable Software and Affected Versions PCRE2 versions prior to 10.48

Description An out-of-bounds read occurs in the pcre2 match() function following a Just-In-Time (JIT) fallback—a process where the engine reverts to a slower interpretation mode when the optimized JIT code cannot handle a specific case—when an attacker provides invalid UTF data.

Recommendations Update to version 10.48 or later.