CVE-2026-89157
Fixed in a distro release EPSS <1%CVSS 5.7
PCRE2 before 10.48, on 32-bit platforms, has a pcre2_pattern_convert out-of-bounds write when an attacker can provide a large pattern.
Products: pcre2
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux 10 | pcre2 | 10.44-1.5.el10_2 |
| AlmaLinux 10 | pcre2-devel | 10.44-1.5.el10_2 |
| AlmaLinux 10 | pcre2-static | 10.44-1.5.el10_2 |
| AlmaLinux 10 | pcre2-syntax | 10.44-1.5.el10_2 |
| AlmaLinux 10 | pcre2-tools | 10.44-1.5.el10_2 |
| AlmaLinux 10 | pcre2-utf16 | 10.44-1.5.el10_2 |
| AlmaLinux 10 | pcre2-utf32 | 10.44-1.5.el10_2 |
| AlmaLinux 8 | pcre2 | 10.32-4.el8_10 |
| AlmaLinux 8 | pcre2-devel | 10.32-4.el8_10 |
| AlmaLinux 8 | pcre2-tools | 10.32-4.el8_10 |
| AlmaLinux 8 | pcre2-utf16 | 10.32-4.el8_10 |
| AlmaLinux 8 | pcre2-utf32 | 10.32-4.el8_10 |
| AlmaLinux 9 | pcre2 | 10.40-7.el9_8 |
| AlmaLinux 9 | pcre2-devel | 10.40-7.el9_8 |
| AlmaLinux 9 | pcre2-syntax | 10.40-7.el9_8 |
| AlmaLinux 9 | pcre2-tools | 10.40-7.el9_8 |
| AlmaLinux 9 | pcre2-utf16 | 10.40-7.el9_8 |
| AlmaLinux 9 | pcre2-utf32 | 10.40-7.el9_8 |
| Alpine 3.21 | pcre2 | 10.43-r1 |
| Alpine 3.22 | pcre2 | 10.46-r1 |
| Alpine 3.23 | pcre2 | 10.48-r0 |
| Alpine 3.24 | pcre2 | 10.48-r0 |
| Debian 12 | pcre2 | 10.42-1+deb12u1 |
| Debian 13 | pcre2 | 10.46-1~deb13u2 |
| Debian 14 | pcre2 | 10.48-1 |
| Red Hat Enterprise Linux 10.2 | pcre2 | 0:10.44-1.5.el10_2 |
| Red Hat Enterprise Linux 10.2 | pcre2-debuginfo | 0:10.44-1.5.el10_2 |
| Red Hat Enterprise Linux 10.2 | pcre2-debugsource | 0:10.44-1.5.el10_2 |
| Red Hat Enterprise Linux 10.2 | pcre2-devel | 0:10.44-1.5.el10_2 |
| Red Hat Enterprise Linux 10.2 | pcre2-static | 0:10.44-1.5.el10_2 |
| Red Hat Enterprise Linux 10.2 | pcre2-syntax | 0:10.44-1.5.el10_2 |
| Red Hat Enterprise Linux 10.2 | pcre2-tools | 0:10.44-1.5.el10_2 |
| Red Hat Enterprise Linux 10.2 | pcre2-tools-debuginfo | 0:10.44-1.5.el10_2 |
| Red Hat Enterprise Linux 10.2 | pcre2-utf16 | 0:10.44-1.5.el10_2 |
| Red Hat Enterprise Linux 10.2 | pcre2-utf16-debuginfo | 0:10.44-1.5.el10_2 |
| Red Hat Enterprise Linux 10.2 | pcre2-utf32 | 0:10.44-1.5.el10_2 |
| Red Hat Enterprise Linux 10.2 | pcre2-utf32-debuginfo | 0:10.44-1.5.el10_2 |
| Red Hat Enterprise Linux 8 | pcre2 | 0:10.32-4.el8_10 |
| Red Hat Enterprise Linux 8 | pcre2-debuginfo | 0:10.32-4.el8_10 |
| Red Hat Enterprise Linux 8 | pcre2-debugsource | 0:10.32-4.el8_10 |
| Red Hat Enterprise Linux 8 | pcre2-devel | 0:10.32-4.el8_10 |
| Red Hat Enterprise Linux 8 | pcre2-tools | 0:10.32-4.el8_10 |
| Red Hat Enterprise Linux 8 | pcre2-tools-debuginfo | 0:10.32-4.el8_10 |
| Red Hat Enterprise Linux 8 | pcre2-utf16 | 0:10.32-4.el8_10 |
| Red Hat Enterprise Linux 8 | pcre2-utf16-debuginfo | 0:10.32-4.el8_10 |
| Red Hat Enterprise Linux 8 | pcre2-utf32 | 0:10.32-4.el8_10 |
| Red Hat Enterprise Linux 8 | pcre2-utf32-debuginfo | 0:10.32-4.el8_10 |
| Red Hat Enterprise Linux 9 | pcre2 | 0:10.40-7.el9_8 |
| Red Hat Enterprise Linux 9 | pcre2-debuginfo | 0:10.40-7.el9_8 |
| Red Hat Enterprise Linux 9 | pcre2-debugsource | 0:10.40-7.el9_8 |
| Red Hat Enterprise Linux 9 | pcre2-devel | 0:10.40-7.el9_8 |
| Red Hat Enterprise Linux 9 | pcre2-syntax | 0:10.40-7.el9_8 |
| Red Hat Enterprise Linux 9 | pcre2-tools | 0:10.40-7.el9_8 |
| Red Hat Enterprise Linux 9 | pcre2-tools-debuginfo | 0:10.40-7.el9_8 |
| Red Hat Enterprise Linux 9 | pcre2-utf16 | 0:10.40-7.el9_8 |
| Red Hat Enterprise Linux 9 | pcre2-utf16-debuginfo | 0:10.40-7.el9_8 |
| Red Hat Enterprise Linux 9 | pcre2-utf32 | 0:10.40-7.el9_8 |
| Red Hat Enterprise Linux 9 | pcre2-utf32-debuginfo | 0:10.40-7.el9_8 |
| Red Hat hummingbird 1 | pcre2 | 0:10.48-0.1.hum1 |
| Red Hat hummingbird 1 | pcre2-devel | 0:10.48-0.1.hum1 |
| Red Hat hummingbird 1 | pcre2-static | 0:10.48-0.1.hum1 |
| Red Hat hummingbird 1 | pcre2-syntax | 0:10.48-0.1.hum1 |
| Red Hat hummingbird 1 | pcre2-tools | 0:10.48-0.1.hum1 |
| Red Hat hummingbird 1 | pcre2-utf16 | 0:10.48-0.1.hum1 |
| Red Hat hummingbird 1 | pcre2-utf32 | 0:10.48-0.1.hum1 |
| Rocky Linux 10 | pcre2 | 0:10.44-1.5.el10_2 |
| Rocky Linux 8 | pcre2 | 0:10.32-4.el8_10 |
| Rocky Linux 9 | pcre2 | 0:10.40-7.el9_8 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS | pcre2 | 10.39-150400.4.12.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS | pcre2 | 10.39-150400.4.12.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS | pcre2 | 10.39-150400.4.12.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS | pcre2 | 10.39-150400.4.12.1 |
| SUSE Linux Enterprise Micro 5.3 | pcre2 | 10.39-150400.4.12.1 |
| SUSE Linux Enterprise Micro 5.4 | pcre2 | 10.39-150400.4.12.1 |
| SUSE Linux Enterprise Micro 5.5 | pcre2 | 10.39-150400.4.12.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP7 | pcre2 | 10.42-150600.3.3.1 |
| SUSE Linux Enterprise Server 12 SP5-LTSS | pcre2 | 10.34-1.16.1 |
| SUSE Linux Enterprise Server 15 SP4-LTSS | pcre2 | 10.39-150400.4.12.1 |
| SUSE Linux Enterprise Server 15 SP5-LTSS | pcre2 | 10.39-150400.4.12.1 |
| SUSE Linux Enterprise Server 15 SP6-LTSS | pcre2 | 10.42-150600.3.3.1 |
| SUSE Linux Enterprise Server 16.0 | pcre2 | 10.45-160000.4.1 |
| SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 | pcre2 | 10.34-1.16.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP4 | pcre2 | 10.39-150400.4.12.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP5 | pcre2 | 10.39-150400.4.12.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP6 | pcre2 | 10.42-150600.3.3.1 |
| SUSE Linux Enterprise Server for SAP applications 16.0 | pcre2 | 10.45-160000.4.1 |
| SUSE Linux Micro 6.0 | pcre2 | 10.42-3.1 |
| SUSE Linux Micro 6.1 | pcre2 | 10.42-slfo.1.1_2.1 |
| SUSE Linux Micro 6.2 | pcre2 | 10.45-160000.4.1 |
| Ubuntu 20.04 LTS | pcre2 | no fix |
| Ubuntu 22.04 LTS | pcre2 | no fix |
| Ubuntu 24.04 LTS | pcre2 | no fix |
| Ubuntu 26.04 LTS | pcre2 | no fix |
| Ubuntu 26.10 | pcre2 | no fix |
| Ubuntu Pro 18.04 LTS | pcre2 | no fix |
| openSUSE Leap 16.0 | pcre2 | 10.45-160000.4.1 |