CyberRota Analysis
AI-GeneratedPCRE2 versions prior to 10.48 are vulnerable to an out-of-bounds read in the pcre2_match function when handling invalid UTF input, potentially leading to information disclosure. While the severity is classified as low, organizations using affected versions should prioritize patching to mitigate any risks associated with improper handling of UTF data. Users of PCRE2 libraries in applications that process UTF content should assess their exposure and update accordingly.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
PCRE2 before 10.48 has a pcre2_match out-of-bounds read during the PCRE2_MATCH_INVALID_UTF matching of an invalid UTF subject.