Medium severity5.7NVD Advisory· Published Sep 11, 2026· Updated Sep 16, 2026
CVE-2026-89157
CVE-2026-89157
Description
PCRE2 before 10.48, on 32-bit platforms, has a pcre2_pattern_convert out-of-bounds write when an attacker can provide a large pattern.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
12- osv-coords8 versionspkg:rpm/almalinux/pcre2pkg:rpm/almalinux/pcre2-develpkg:rpm/almalinux/pcre2-staticpkg:rpm/almalinux/pcre2-syntaxpkg:rpm/almalinux/pcre2-toolspkg:rpm/almalinux/pcre2-utf16pkg:rpm/almalinux/pcre2-utf32pkg:rpm/opensuse/pcre2&distro=openSUSE%20Leap%2016.0
< 10.44-1.5.el10_2+ 7 more
- (no CPE)range: < 10.44-1.5.el10_2
- (no CPE)range: < 10.44-1.5.el10_2
- (no CPE)range: < 10.44-1.5.el10_2
- (no CPE)range: < 10.44-1.5.el10_2
- (no CPE)range: < 10.44-1.5.el10_2
- (no CPE)range: < 10.44-1.5.el10_2
- (no CPE)range: < 10.44-1.5.el10_2
- (no CPE)range: < 10.45-160000.4.1
Patches
Vulnerability mechanics
References
2- github.com/PCRE2Project/pcre2/security/advisories/GHSA-q8g2-wprr-34m9nvdExploitMitigationVendor Advisory
- github.com/PCRE2Project/pcre2/releases/tag/pcre2-10.48nvdRelease Notes
News mentions
0No linked articles in our index yet.