CVE-2026-89158

A flaw was found in PCRE2. On 32-bit platforms, an integer overflow in the pcre2_compile_32 function can lead to an out-of-bounds write. This vulnerability could allow a remote attacker to achieve a high integrity impact and a low availability impact, potentially leading to data corruption or denial of service.

A Moderate impact flaw was found in PCRE2 affecting 32-bit platforms, where an integer overflow in the pcre2_compile_32 function can lead to an out-of-bounds write. While exploitable over the network without requiring user interaction or privileges, the high attack complexity reduces its overall severity. Successful exploitation could result in high integrity impact, such as data corruption, or a low availability impact, leading to a denial of service.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.