PT-2026-89764

CVE-2026-89158

·

Published

2026-09-11

·

Updated

2026-10-15

Description by

CVSS 3.1
6.5
Medium
MetricsAV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L
Name of the Vulnerable Software and Affected Versions PCRE2 versions prior to 10.48
Description On 32-bit platforms, an integer overflow occurs within the pcre2 compile 32() function, which can lead to an out-of-bounds write. An integer overflow happens when an arithmetic operation attempts to create a numeric value that is outside of the range that can be represented with a given number of bits.
Recommendations Update to version 10.48 or later.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Related identifiers
GHSA-FMGR-6GGQ-9859
ALSA-2026:81522
ALSA-2026:81532
ALSA-2026:81613
AZL-100062
AZL-101117
AZL-101751
AZL-101757
AZL-101793
AZL-101805
AZL-101814
CLSA-2026-1789482668
CLSA-2026-1789483647
CLSA-2026-1789567071
CLSA-2026-1789573344
CLSA-2026-1792040049
ECHO-3E35-AAD6-DD7E
OESA-2026-4111
OPENSUSE-SU-2026:21938-1
SUSE-SU-2026:23740-1
SUSE-SU-2026:23840-1
SUSE-SU-2026:23891-1
SUSE-SU-2026:23906-1
SUSE-SU-2026:4201-1
SUSE-SU-2026:4241-1
SUSE-SU-2026:4458-1
Found an issue in the description? Have something to add? Feel free to write us 👾