Browse CVEs

CRITICAL 9.1 CVE-2025-58050 The PCRE2 library is a set of C functions that implement regular expression pattern matching. In version 10.45, a heap-buffer-overflow read vulnerabi… Pcre2 Patch available Fix from $2,3002025-08-27 HIGH 7.5 CVE-2022-41409 Integer overflow vulnerability in pcre2test before 10.41 allows attackers to cause a denial of service or other unspecified impacts via negative inpu… Pcre2 10.41+ Fix from $1,9502023-07-18 HIGH 7.5 CVE-2019-20838 libpcre in PCRE before 8.43 allows a subject buffer over-read in JIT when UTF is disabled, and \X or \R has more than one fixed quantifier, a related… Pcre 8.2.12 / 8.43+ Fix from $1,9502020-06-15 MEDIUM 5.5 CVE-2017-16231 In PCRE 8.41, after compiling, a pcretest load test PoC produces a crash overflow in the function match() in pcre_exec.c because of a self-recursive … Pcre No fix yet Fix from $1,6002019-03-21 HIGH 7.5 CVE-2017-11164 In PCRE 8.41, the OP_KETRMAX feature in the match function in pcre_exec.c allows stack exhaustion (uncontrolled recursion) when processing a crafted … Pcre Mitigation only Fix from $1,9502017-07-11 CRITICAL 9.8 CVE-2017-8786 pcre2test.c in PCRE2 10.23 allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impac… Pcre2 Patch available Fix from $2,3002017-05-05 CRITICAL 9.8 CVE-2017-8399 PCRE2 before 10.30 has an out-of-bounds write caused by a stack-based buffer overflow in pcre2_match.c, related to a "pattern with very many captures… Pcre2 10.30+ Fix from $2,3002017-05-01 HIGH 7.8 CVE-2017-7245 Stack-based buffer overflow in the pcre32_copy_substring function in pcre_get.c in libpcre1 in PCRE 8.40 allows remote attackers to cause a denial of… Pcre Mitigation only Fix from $1,9502017-03-23 HIGH 7.8 CVE-2017-7246 Stack-based buffer overflow in the pcre32_copy_substring function in pcre_get.c in libpcre1 in PCRE 8.40 allows remote attackers to cause a denial of… Pcre Mitigation only Fix from $1,9502017-03-23 MEDIUM 5.5 CVE-2017-7244 The _pcre32_xclass function in pcre_xclass.c in libpcre1 in PCRE 8.40 allows remote attackers to cause a denial of service (invalid memory read) via … Pcre Mitigation only Fix from $1,6002017-03-23 HIGH 7.5 CVE-2017-7186EPSS 5% libpcre1 in PCRE 8.40 and libpcre2 in PCRE2 10.23 allow remote attackers to cause a denial of service (segmentation violation for read access, and ap… Pcre Patch available Fix from $1,9502017-03-20 HIGH 7.5 CVE-2017-6004 The compile_bracket_matchingpath function in pcre_jit_compile.c in PCRE through 8.x before revision 1680 (e.g., the PHP 7.1.1 bundled version) allows… Pcre after 8.38 Fix from $1,9502017-02-16 HIGH 7.5 CVE-2015-3217EPSS 6% PCRE 7.8 and 8.32 through 8.37, and PCRE2 10.10 mishandle group empty matches, which might allow remote attackers to cause a denial of service (stack… Pcre2 Patch available Fix from $1,9502016-12-13 CRITICAL 9.8 CVE-2015-3210EPSS 9% Heap-based buffer overflow in PCRE 8.34 through 8.37 and PCRE2 10.10 allows remote attackers to execute arbitrary code via a crafted regular expressi… Pcre2 No fix yet Fix from $2,3002016-12-13 HIGH 7.3 CVE-2014-9769 pcre_jit_compile.c in PCRE 8.35 does not properly use table jumps to optimize nested alternatives, which allows remote attackers to cause a denial of… Pcre Mitigation only Fix from $1,9502016-03-28 CRITICAL 9.8 CVE-2016-3191EPSS 8% The compile_branch function in pcre_compile.c in PCRE 8.x before 8.39 and pcre2_compile.c in PCRE2 before 10.22 mishandles patterns containing an (*A… Pcre after 10.21 Fix from $2,3002016-03-17 HIGH 7.5 CVE-2015-8395 PCRE before 8.38 mishandles certain references, which allows remote attackers to cause a denial of service or possibly have unspecified other impact … Perl Compatible Regular Expression Library after 8.37 Fix from $1,9502015-12-02 HIGH 7.5 CVE-2015-8392 PCRE before 8.38 mishandles certain instances of the (?| substring, which allows remote attackers to cause a denial of service (unintended recursion … Perl Compatible Regular Expression Library after 8.37 Fix from $1,9502015-12-02 HIGH 7.5 CVE-2015-8384 PCRE before 8.38 mishandles the /(?J)(?'d'(?'d'\g{d}))/ pattern and related patterns with certain recursive back references, which allows remote atta… Perl Compatible Regular Expression Library after 8.37 Fix from $1,9502015-12-02 MEDIUM 6.4 CVE-2015-8382 The match function in pcre_exec.c in PCRE before 8.37 mishandles the /(?:((abcd))|(((?:(?:(?:(?:abc|(?:abcdef))))b)abcdefghi)abc)|((*ACCEPT)))/ patte… Perl Compatible Regular Expression Library No fix yet Fix from $1,6002015-12-02 HIGH 7.5 CVE-2015-8381EPSS 5% The compile_regex function in pcre_compile.c in PCRE before 8.38 and pcre2_compile.c in PCRE2 before 10.2x mishandles the /(?J:(?|(:(?|(?'R')(\k'R')|… Perl Compatible Regular Expression Library after 8.37 Fix from $1,9502015-12-02 HIGH 7.5 CVE-2015-2327 PCRE before 8.36 mishandles the /(((a\2)|(a*)\g<-1>))*/ pattern and related patterns with certain internal recursive back references, which allows re… Perl Compatible Regular Expression Library after 8.35 Fix from $1,9502015-12-02 HIGH 7.5 CVE-2008-0674EPSS 6% Buffer overflow in PCRE before 7.6 allows remote attackers to execute arbitrary code via a regular expression containing a character class with a lar… Pcre after 7.5 Fix from $1,9502008-02-18 MEDIUM 6.8 CVE-2006-7227 Integer overflow in Perl-Compatible Regular Expression (PCRE) library before 6.7 allows context-dependent attackers to execute arbitrary code via a r… Pcre after 6.6 Fix from $1,6002007-11-14 MEDIUM 6.8 CVE-2006-7228 Integer overflow in Perl-Compatible Regular Expression (PCRE) library before 6.7 might allow context-dependent attackers to execute arbitrary code vi… Pcre after 6.6 Fix from $1,6002007-11-14 HIGH 7.5 CVE-2007-4766 Multiple integer overflows in Perl-Compatible Regular Expression (PCRE) library before 7.3 allow context-dependent attackers to cause a denial of ser… Pcre after 7.3 Fix from $1,9502007-11-07 MEDIUM 6.8 CVE-2007-1659 Perl-Compatible Regular Expression (PCRE) library before 7.3 allows context-dependent attackers to cause a denial of service (crash) and possibly exe… Pcre after 7.3 Fix from $1,6002007-11-07 MEDIUM 6.8 CVE-2007-1660 Perl-Compatible Regular Expression (PCRE) library before 7.0 does not properly calculate sizes for unspecified "multiple forms of character class", w… Pcre after 6.9 Fix from $1,6002007-11-07 MEDIUM 6.8 CVE-2007-4768 Heap-based buffer overflow in Perl-Compatible Regular Expression (PCRE) library before 7.3 allows context-dependent attackers to execute arbitrary co… Pcre after 7.3 Fix from $1,6002007-11-07 MEDIUM 6.4 CVE-2007-1661 Perl-Compatible Regular Expression (PCRE) library before 7.3 backtracks too far when matching certain input bytes against some regex patterns in non-… Perl Compatible Regular Expression Library after 7.2 Fix from $1,6002007-11-07