Vulnerabilities > Pcre > Pcre2 > High

DATE CVE VULNERABILITY TITLE RISK
2023-07-18 CVE-2022-41409 Integer Overflow or Wraparound vulnerability in Pcre Pcre2
Integer overflow vulnerability in pcre2test before 10.41 allows attackers to cause a denial of service or other unspecified impacts via negative input.
network
low complexity
pcre CWE-190
7.5
2020-02-14 CVE-2019-20454 Out-of-bounds Read vulnerability in multiple products
An out-of-bounds read was discovered in PCRE before 10.34 when the pattern \X is JIT compiled and used to match specially crafted subjects in non-UTF mode.
network
low complexity
pcre fedoraproject splunk CWE-125
7.5
2017-05-05 CVE-2017-8786 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Pcre Pcre2 10.23
pcre2test.c in PCRE2 10.23 allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted regular expression.
network
low complexity
pcre CWE-119
7.5
2017-05-01 CVE-2017-8399 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Pcre Pcre2
PCRE2 before 10.30 has an out-of-bounds write caused by a stack-based buffer overflow in pcre2_match.c, related to a "pattern with very many captures."
network
low complexity
pcre CWE-119
7.5
2016-03-17 CVE-2016-3191 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Pcre and Pcre2
The compile_branch function in pcre_compile.c in PCRE 8.x before 8.39 and pcre2_compile.c in PCRE2 before 10.22 mishandles patterns containing an (*ACCEPT) substring in conjunction with nested parentheses, which allows remote attackers to execute arbitrary code or cause a denial of service (stack-based buffer overflow) via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror, aka ZDI-CAN-3542.
network
low complexity
pcre CWE-119
7.5