CyberRota Analysis
AI-GeneratedPCRE2 versions prior to 10.48 on 32-bit platforms are vulnerable to an out-of-bounds write in the pcre2_pattern_convert function, which can be triggered by an attacker supplying a large pattern. This vulnerability could lead to potential memory corruption and application crashes. Organizations using affected versions of PCRE2 should prioritize patching to mitigate the risk of exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
GitHub PoC Links
Note: these links are listed for security research and verification purposes only.
CVE
CVE-2026-89157
Severity
MEDIUM
CVSS
5.7
EPSS
0.10%
Original NVD Description
PCRE2 before 10.48, on 32-bit platforms, has a pcre2_pattern_convert out-of-bounds write when an attacker can provide a large pattern.