GHSA-Q8G2-WPRR-34M9: PCRE2: out-of-bounds write in pcre2_pattern_convert() with large patterns on 32-bit systems · Advisory · PCRE2Project/pcre2 · GitHub

Linked CVE reports

These are source relationships, not a claim that this article fixes every affected product or branch.

• CVE-2026-89157PCRE2 before 10.48, on 32-bit platforms, has a pcre2_pattern_convert out-of-bounds write when an attacker can provide a large pattern

Source and provenance

Original title: PCRE2: out-of-bounds write in pcre2_pattern_convert() with large patterns on 32-bit systems · Advisory · PCRE2Project/pcre2 · GitHub. Captured 26 Sept 2026, 16:54 UTC. The stored article is used for enrichment and change detection; BlackTree does not republish the publisher's full text here.