Low severity3.7NVD Advisory· Published Sep 11, 2026· Updated Sep 16, 2026
CVE-2026-89160
CVE-2026-89160
Description
PCRE2 before 10.48 has a pcre2_match out-of-bounds read during the PCRE2_MATCH_INVALID_UTF matching of an invalid UTF subject.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
12- osv-coords8 versionspkg:rpm/almalinux/pcre2pkg:rpm/almalinux/pcre2-develpkg:rpm/almalinux/pcre2-staticpkg:rpm/almalinux/pcre2-syntaxpkg:rpm/almalinux/pcre2-toolspkg:rpm/almalinux/pcre2-utf16pkg:rpm/almalinux/pcre2-utf32pkg:rpm/opensuse/pcre2&distro=openSUSE%20Leap%2016.0
< 10.44-1.5.el10_2+ 7 more
- (no CPE)range: < 10.44-1.5.el10_2
- (no CPE)range: < 10.44-1.5.el10_2
- (no CPE)range: < 10.44-1.5.el10_2
- (no CPE)range: < 10.44-1.5.el10_2
- (no CPE)range: < 10.44-1.5.el10_2
- (no CPE)range: < 10.44-1.5.el10_2
- (no CPE)range: < 10.44-1.5.el10_2
- (no CPE)range: < 10.45-160000.4.1
Patches
Vulnerability mechanics
References
2- github.com/PCRE2Project/pcre2/security/advisories/GHSA-9qww-pwc4-77qqnvdExploitMitigationVendor Advisory
- github.com/PCRE2Project/pcre2/releases/tag/pcre2-10.48nvdRelease Notes
News mentions
0No linked articles in our index yet.