Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2026-89157

PCRE2 before 10.48, on 32-bit platforms, has a pcre2_pattern_convert out-of-bounds write when an attacker can provide a large pattern.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 18.6%
CVSS Severity
CVSS v3 Score 5.7
Products affected by CVE-2026-89157
  • Pcre » Pcre2 » Version: 10.30
    cpe:2.3:a:pcre:pcre2:10.30
  • Pcre » Pcre2 » Version: 10.31
    cpe:2.3:a:pcre:pcre2:10.31
  • Pcre » Pcre2 » Version: 10.32
    cpe:2.3:a:pcre:pcre2:10.32
  • Pcre » Pcre2 » Version: 10.33
    cpe:2.3:a:pcre:pcre2:10.33
  • Pcre » Pcre2 » Version: 10.34
    cpe:2.3:a:pcre:pcre2:10.34
  • Pcre » Pcre2 » Version: 10.35
    cpe:2.3:a:pcre:pcre2:10.35
  • Pcre » Pcre2 » Version: 10.36
    cpe:2.3:a:pcre:pcre2:10.36
  • Pcre » Pcre2 » Version: 10.37
    cpe:2.3:a:pcre:pcre2:10.37
  • Pcre » Pcre2 » Version: 10.38
    cpe:2.3:a:pcre:pcre2:10.38
  • Pcre » Pcre2 » Version: 10.39
    cpe:2.3:a:pcre:pcre2:10.39
  • Pcre » Pcre2 » Version: 10.40
    cpe:2.3:a:pcre:pcre2:10.40
  • Pcre » Pcre2 » Version: 10.45
    cpe:2.3:a:pcre:pcre2:10.45
  • Pcre » Pcre2 » Version: 10.46
    cpe:2.3:a:pcre:pcre2:10.46
  • Pcre » Pcre2 » Version: 10.47
    cpe:2.3:a:pcre:pcre2:10.47
  • Pcre » Pcre2 » Version: 10.48
    cpe:2.3:a:pcre:pcre2:10.48


Contact Us

Shodan ® - All rights reserved