CyberRota Analysis
AI-GeneratedPCRE2 versions prior to 10.48 on 32-bit platforms are vulnerable to an integer overflow in the pcre2_compile_32 function, leading to potential out-of-bounds write conditions. This vulnerability could allow an attacker to execute arbitrary code or cause a denial of service. Organizations utilizing PCRE2 in their applications, particularly on 32-bit systems, should prioritize patching to mitigate the associated risks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
GitHub PoC Links
Note: these links are listed for security research and verification purposes only.
CVE
CVE-2026-89158
Severity
MEDIUM
CVSS
6.5
EPSS
0.22%
Original NVD Description
PCRE2 before 10.48, on 32-bit platforms, has a pcre2_compile_32 integer overflow and resultant out-of-bounds write.