CVE-2026-89156 — CVSS 2.9 LOW

PCRE2 before 10.48 has a pcre2_match out-of-bounds read after a JIT fallback when an attacker can provide invalid UTF data.

Loading application…