RHSA-2026:67534
Vulnerability from csaf_redhat - Published: 2026-09-15 12:05 - Updated: 2026-09-21 11:42Summary
Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
Severity
Important
Notes
Topic: An update for Red Hat Hardened Images RPMs is now available.
Details: This update includes the following RPMs:
pcre2:
* pcre2-10.48-0.1.hum1 (aarch64, x86_64)
* pcre2-devel-10.48-0.1.hum1 (aarch64, x86_64)
* pcre2-static-10.48-0.1.hum1 (aarch64, x86_64)
* pcre2-syntax-10.48-0.1.hum1 (noarch)
* pcre2-tools-10.48-0.1.hum1 (aarch64, x86_64)
* pcre2-utf16-10.48-0.1.hum1 (aarch64, x86_64)
* pcre2-utf32-10.48-0.1.hum1 (aarch64, x86_64)
* pcre2-10.48-0.1.hum1.src (src)
Security Fix(es):
pcre2:
* CVE-2026-89161
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in PCRE2. An out-of-bounds write vulnerability exists in the `pcre2_dfa_match` function due to improper size checking when reusing cached workspace blocks. A remote attacker could exploit this by providing a specially crafted regular expression or a recursive pattern in conjunction with a small heap limit. This could lead to data corruption or potentially arbitrary code execution, compromising the integrity and availability of the system.
8.2 (High)
Affected products
Fixed
15 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:pcre2-0:10.48-0.1.hum1@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:pcre2-0:10.48-0.1.hum1@src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:pcre2-0:10.48-0.1.hum1@x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:pcre2-devel-0:10.48-0.1.hum1@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:pcre2-devel-0:10.48-0.1.hum1@x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:pcre2-static-0:10.48-0.1.hum1@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:pcre2-static-0:10.48-0.1.hum1@x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:pcre2-syntax-0:10.48-0.1.hum1@noarch@public-hummingbird-aarch64-rpms | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:pcre2-syntax-0:10.48-0.1.hum1@noarch@public-hummingbird-x86_64-rpms | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:pcre2-tools-0:10.48-0.1.hum1@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:pcre2-tools-0:10.48-0.1.hum1@x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:pcre2-utf16-0:10.48-0.1.hum1@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:pcre2-utf16-0:10.48-0.1.hum1@x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:pcre2-utf32-0:10.48-0.1.hum1@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:pcre2-utf32-0:10.48-0.1.hum1@x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in PCRE2. An attacker can provide invalid UTF (Unicode Transformation Format) data, leading to an out-of-bounds read during a Just-In-Time (JIT) fallback. This vulnerability could potentially result in a denial of service.
CWE-125 - Out-of-bounds ReadAffected products
Fixed
15 products, the same list as for
CVE-2026-86145
Threats
Impact
Low
A flaw was found in PCRE2. On 32-bit platforms, an attacker can provide a specially crafted large pattern, leading to an out-of-bounds write within the pcre2_pattern_convert function. This vulnerability can result in high integrity impact, such as data corruption, and potentially a low availability impact, causing a denial of service.
5.7 (Medium)
Affected products
Fixed
15 products, the same list as for
CVE-2026-86145
Threats
Impact
Moderate
A flaw was found in PCRE2. On 32-bit platforms, an integer overflow in the `pcre2_compile_32` function can lead to an out-of-bounds write. This vulnerability could allow a remote attacker to achieve a high integrity impact and a low availability impact, potentially leading to data corruption or denial of service.
6.5 (Medium)
Affected products
Fixed
15 products, the same list as for
CVE-2026-86145
Threats
Impact
Moderate
A flaw was found in PCRE2, a library for processing regular expressions. A remote attacker could exploit this vulnerability by providing a specially crafted input that triggers an out-of-bounds read during pattern matching with invalid UTF (Unicode Transformation Format) characters. This could lead to a denial of service, making the affected system or application unavailable.
CWE-125 - Out-of-bounds ReadAffected products
Fixed
15 products, the same list as for
CVE-2026-86145
Threats
Impact
Low
A flaw was found in PCRE2, a library for processing regular expressions. The `pcre2_jit_match` function, which handles just-in-time (JIT) compilation for regular expressions, incorrectly manages memory when processing certain inputs. This memory corruption vulnerability could allow a local attacker to cause the application to crash, leading to a denial of service, or potentially execute unauthorized code.
7.4 (High)
Affected products
Fixed
15 products, the same list as for
CVE-2026-86145
Threats
Impact
Important
A flaw was found in PCRE2. The `pcre2_serialize_encode` function might disclose two bytes of information to an attacker. This vulnerability typically occurs in scenarios where the attacker already has unsafe access to the system, making exploitation difficult. The primary impact is a limited information disclosure.
CWE-125 - Out-of-bounds ReadAffected products
Fixed
15 products, the same list as for
CVE-2026-86145
Threats
Impact
Low
References
47 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for Red Hat Hardened Images RPMs is now available.",
"title": "Topic"
},
{
"category": "general",
"text": "This update includes the following RPMs:\n\npcre2:\n * pcre2-10.48-0.1.hum1 (aarch64, x86_64)\n * pcre2-devel-10.48-0.1.hum1 (aarch64, x86_64)\n * pcre2-static-10.48-0.1.hum1 (aarch64, x86_64)\n * pcre2-syntax-10.48-0.1.hum1 (noarch)\n * pcre2-tools-10.48-0.1.hum1 (aarch64, x86_64)\n * pcre2-utf16-10.48-0.1.hum1 (aarch64, x86_64)\n * pcre2-utf32-10.48-0.1.hum1 (aarch64, x86_64)\n * pcre2-10.48-0.1.hum1.src (src)\n\nSecurity Fix(es):\n\npcre2:\n * CVE-2026-89161",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:67534",
"url": "https://access.redhat.com/errata/RHSA-2026:67534"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-89161",
"url": "https://access.redhat.com/security/cve/CVE-2026-89161"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://images.redhat.com/",
"url": "https://images.redhat.com/"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-89160",
"url": "https://access.redhat.com/security/cve/CVE-2026-89160"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-89158",
"url": "https://access.redhat.com/security/cve/CVE-2026-89158"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-89157",
"url": "https://access.redhat.com/security/cve/CVE-2026-89157"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-89156",
"url": "https://access.redhat.com/security/cve/CVE-2026-89156"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-89162",
"url": "https://access.redhat.com/security/cve/CVE-2026-89162"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-86145",
"url": "https://access.redhat.com/security/cve/CVE-2026-86145"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_67534.json"
}
],
"title": "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
"tracking": {
"current_release_date": "2026-09-21T11:42:48+00:00",
"generator": {
"date": "2026-09-21T11:42:48+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.4.0"
}
},
"id": "RHSA-2026:67534",
"initial_release_date": "2026-09-15T12:05:29+00:00",
"revision_history": [
{
"date": "2026-09-15T12:05:29+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-09-15T12:38:45+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-09-21T11:42:48+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Hardened Images",
"product": {
"name": "Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:hummingbird:1"
}
}
}
],
"category": "product_family",
"name": "Red Hat Hardened Images"
},
{
"branches": [
{
"category": "product_version",
"name": "pcre2-0:10.48-0.1.hum1@aarch64",
"product": {
"name": "pcre2-0:10.48-0.1.hum1@aarch64",
"product_id": "pcre2-0:10.48-0.1.hum1@aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcre2@10.48-0.1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
},
{
"category": "product_version",
"name": "pcre2-devel-0:10.48-0.1.hum1@aarch64",
"product": {
"name": "pcre2-devel-0:10.48-0.1.hum1@aarch64",
"product_id": "pcre2-devel-0:10.48-0.1.hum1@aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcre2-devel@10.48-0.1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
},
{
"category": "product_version",
"name": "pcre2-static-0:10.48-0.1.hum1@aarch64",
"product": {
"name": "pcre2-static-0:10.48-0.1.hum1@aarch64",
"product_id": "pcre2-static-0:10.48-0.1.hum1@aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcre2-static@10.48-0.1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
},
{
"category": "product_version",
"name": "pcre2-tools-0:10.48-0.1.hum1@aarch64",
"product": {
"name": "pcre2-tools-0:10.48-0.1.hum1@aarch64",
"product_id": "pcre2-tools-0:10.48-0.1.hum1@aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcre2-tools@10.48-0.1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
},
{
"category": "product_version",
"name": "pcre2-utf16-0:10.48-0.1.hum1@aarch64",
"product": {
"name": "pcre2-utf16-0:10.48-0.1.hum1@aarch64",
"product_id": "pcre2-utf16-0:10.48-0.1.hum1@aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcre2-utf16@10.48-0.1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
},
{
"category": "product_version",
"name": "pcre2-utf32-0:10.48-0.1.hum1@aarch64",
"product": {
"name": "pcre2-utf32-0:10.48-0.1.hum1@aarch64",
"product_id": "pcre2-utf32-0:10.48-0.1.hum1@aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcre2-utf32@10.48-0.1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "pcre2-0:10.48-0.1.hum1@src",
"product": {
"name": "pcre2-0:10.48-0.1.hum1@src",
"product_id": "pcre2-0:10.48-0.1.hum1@src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcre2@10.48-0.1.hum1?arch=src\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-source-rpms"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "pcre2-0:10.48-0.1.hum1@x86_64",
"product": {
"name": "pcre2-0:10.48-0.1.hum1@x86_64",
"product_id": "pcre2-0:10.48-0.1.hum1@x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcre2@10.48-0.1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
},
{
"category": "product_version",
"name": "pcre2-devel-0:10.48-0.1.hum1@x86_64",
"product": {
"name": "pcre2-devel-0:10.48-0.1.hum1@x86_64",
"product_id": "pcre2-devel-0:10.48-0.1.hum1@x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcre2-devel@10.48-0.1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
},
{
"category": "product_version",
"name": "pcre2-static-0:10.48-0.1.hum1@x86_64",
"product": {
"name": "pcre2-static-0:10.48-0.1.hum1@x86_64",
"product_id": "pcre2-static-0:10.48-0.1.hum1@x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcre2-static@10.48-0.1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
},
{
"category": "product_version",
"name": "pcre2-tools-0:10.48-0.1.hum1@x86_64",
"product": {
"name": "pcre2-tools-0:10.48-0.1.hum1@x86_64",
"product_id": "pcre2-tools-0:10.48-0.1.hum1@x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcre2-tools@10.48-0.1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
},
{
"category": "product_version",
"name": "pcre2-utf16-0:10.48-0.1.hum1@x86_64",
"product": {
"name": "pcre2-utf16-0:10.48-0.1.hum1@x86_64",
"product_id": "pcre2-utf16-0:10.48-0.1.hum1@x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcre2-utf16@10.48-0.1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
},
{
"category": "product_version",
"name": "pcre2-utf32-0:10.48-0.1.hum1@x86_64",
"product": {
"name": "pcre2-utf32-0:10.48-0.1.hum1@x86_64",
"product_id": "pcre2-utf32-0:10.48-0.1.hum1@x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcre2-utf32@10.48-0.1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "pcre2-syntax-0:10.48-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"product": {
"name": "pcre2-syntax-0:10.48-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"product_id": "pcre2-syntax-0:10.48-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcre2-syntax@10.48-0.1.hum1?arch=noarch\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
},
{
"category": "product_version",
"name": "pcre2-syntax-0:10.48-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"product": {
"name": "pcre2-syntax-0:10.48-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"product_id": "pcre2-syntax-0:10.48-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcre2-syntax@10.48-0.1.hum1?arch=noarch\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "pcre2-0:10.48-0.1.hum1@aarch64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:pcre2-0:10.48-0.1.hum1@aarch64"
},
"product_reference": "pcre2-0:10.48-0.1.hum1@aarch64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcre2-0:10.48-0.1.hum1@src as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:pcre2-0:10.48-0.1.hum1@src"
},
"product_reference": "pcre2-0:10.48-0.1.hum1@src",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcre2-0:10.48-0.1.hum1@x86_64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:pcre2-0:10.48-0.1.hum1@x86_64"
},
"product_reference": "pcre2-0:10.48-0.1.hum1@x86_64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcre2-devel-0:10.48-0.1.hum1@aarch64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:pcre2-devel-0:10.48-0.1.hum1@aarch64"
},
"product_reference": "pcre2-devel-0:10.48-0.1.hum1@aarch64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcre2-devel-0:10.48-0.1.hum1@x86_64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:pcre2-devel-0:10.48-0.1.hum1@x86_64"
},
"product_reference": "pcre2-devel-0:10.48-0.1.hum1@x86_64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcre2-static-0:10.48-0.1.hum1@aarch64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:pcre2-static-0:10.48-0.1.hum1@aarch64"
},
"product_reference": "pcre2-static-0:10.48-0.1.hum1@aarch64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcre2-static-0:10.48-0.1.hum1@x86_64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:pcre2-static-0:10.48-0.1.hum1@x86_64"
},
"product_reference": "pcre2-static-0:10.48-0.1.hum1@x86_64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcre2-syntax-0:10.48-0.1.hum1@noarch@public-hummingbird-aarch64-rpms as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:pcre2-syntax-0:10.48-0.1.hum1@noarch@public-hummingbird-aarch64-rpms"
},
"product_reference": "pcre2-syntax-0:10.48-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcre2-syntax-0:10.48-0.1.hum1@noarch@public-hummingbird-x86_64-rpms as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:pcre2-syntax-0:10.48-0.1.hum1@noarch@public-hummingbird-x86_64-rpms"
},
"product_reference": "pcre2-syntax-0:10.48-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcre2-tools-0:10.48-0.1.hum1@aarch64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:pcre2-tools-0:10.48-0.1.hum1@aarch64"
},
"product_reference": "pcre2-tools-0:10.48-0.1.hum1@aarch64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcre2-tools-0:10.48-0.1.hum1@x86_64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:pcre2-tools-0:10.48-0.1.hum1@x86_64"
},
"product_reference": "pcre2-tools-0:10.48-0.1.hum1@x86_64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcre2-utf16-0:10.48-0.1.hum1@aarch64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:pcre2-utf16-0:10.48-0.1.hum1@aarch64"
},
"product_reference": "pcre2-utf16-0:10.48-0.1.hum1@aarch64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcre2-utf16-0:10.48-0.1.hum1@x86_64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:pcre2-utf16-0:10.48-0.1.hum1@x86_64"
},
"product_reference": "pcre2-utf16-0:10.48-0.1.hum1@x86_64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcre2-utf32-0:10.48-0.1.hum1@aarch64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:pcre2-utf32-0:10.48-0.1.hum1@aarch64"
},
"product_reference": "pcre2-utf32-0:10.48-0.1.hum1@aarch64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcre2-utf32-0:10.48-0.1.hum1@x86_64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:pcre2-utf32-0:10.48-0.1.hum1@x86_64"
},
"product_reference": "pcre2-utf32-0:10.48-0.1.hum1@x86_64",
"relates_to_product_reference": "Red Hat Hardened Images"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-86145",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"discovery_date": "2026-09-05T05:20:54.676360+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2528993"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in PCRE2. An out-of-bounds write vulnerability exists in the `pcre2_dfa_match` function due to improper size checking when reusing cached workspace blocks. A remote attacker could exploit this by providing a specially crafted regular expression or a recursive pattern in conjunction with a small heap limit. This could lead to data corruption or potentially arbitrary code execution, compromising the integrity and availability of the system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "pcre2: PCRE2: Out-of-bounds write allows arbitrary code execution via crafted regular expressions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: An out-of-bounds write vulnerability in the PCRE2 library, specifically within the `pcre2_dfa_match` function, could allow arbitrary code execution. This flaw is exploitable in Red Hat products when processing attacker-controlled regular expressions or when a recursive pattern is used in conjunction with a small, API-set heap limit, making it dependent on specific application usage patterns.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:pcre2-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-0:10.48-0.1.hum1@src",
"Red Hat Hardened Images:pcre2-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-devel-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-devel-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-static-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-static-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-syntax-0:10.48-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:pcre2-syntax-0:10.48-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:pcre2-tools-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-tools-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-utf16-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-utf16-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-utf32-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-utf32-0:10.48-0.1.hum1@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-86145"
},
{
"category": "external",
"summary": "RHBZ#2528993",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2528993"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-86145",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-86145"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-86145",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-86145"
},
{
"category": "external",
"summary": "https://github.com/PCRE2Project/pcre2/releases/tag/pcre2-10.48",
"url": "https://github.com/PCRE2Project/pcre2/releases/tag/pcre2-10.48"
},
{
"category": "external",
"summary": "https://github.com/PCRE2Project/pcre2/security/advisories/GHSA-3r4p-g7gg-ppmf",
"url": "https://github.com/PCRE2Project/pcre2/security/advisories/GHSA-3r4p-g7gg-ppmf"
}
],
"release_date": "2026-09-05T05:09:25.571000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-15T12:05:29+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:pcre2-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-0:10.48-0.1.hum1@src",
"Red Hat Hardened Images:pcre2-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-devel-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-devel-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-static-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-static-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-syntax-0:10.48-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:pcre2-syntax-0:10.48-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:pcre2-tools-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-tools-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-utf16-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-utf16-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-utf32-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-utf32-0:10.48-0.1.hum1@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:67534"
},
{
"category": "workaround",
"details": "To mitigate this Improper Protection of Alternate Path vulnerability, ensure that secondary execution branches\u2014such as the reuse of cached memory workspaces\u2014enforce the exact same size and boundary checks as the primary memory allocation paths. Limit exposure by preventing untrusted user input from directly controlling PCRE2 regular expressions, and strictly avoid utilizing recursive matching patterns when operating under a low heap limit. Apply a defense-in-depth strategy by validating all inputs comprehensively.",
"product_ids": [
"Red Hat Hardened Images:pcre2-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-0:10.48-0.1.hum1@src",
"Red Hat Hardened Images:pcre2-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-devel-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-devel-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-static-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-static-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-syntax-0:10.48-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:pcre2-syntax-0:10.48-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:pcre2-tools-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-tools-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-utf16-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-utf16-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-utf32-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-utf32-0:10.48-0.1.hum1@x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:pcre2-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-0:10.48-0.1.hum1@src",
"Red Hat Hardened Images:pcre2-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-devel-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-devel-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-static-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-static-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-syntax-0:10.48-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:pcre2-syntax-0:10.48-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:pcre2-tools-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-tools-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-utf16-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-utf16-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-utf32-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-utf32-0:10.48-0.1.hum1@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "pcre2: PCRE2: Out-of-bounds write allows arbitrary code execution via crafted regular expressions"
},
{
"cve": "CVE-2026-89156",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2026-09-11T04:20:54.923994+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2531743"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in PCRE2. An attacker can provide invalid UTF (Unicode Transformation Format) data, leading to an out-of-bounds read during a Just-In-Time (JIT) fallback. This vulnerability could potentially result in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "PCRE2: PCRE2: Out-of-bounds read via invalid UTF data during JIT fallback",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "An out-of-bounds read can occur in PCRE2 when processing specially crafted invalid UTF data during a JIT fallback. Exploitation requires an application using PCRE2 to process untrusted input with JIT enabled, which may lead to a denial of service or information disclosure.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:pcre2-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-0:10.48-0.1.hum1@src",
"Red Hat Hardened Images:pcre2-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-devel-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-devel-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-static-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-static-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-syntax-0:10.48-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:pcre2-syntax-0:10.48-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:pcre2-tools-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-tools-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-utf16-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-utf16-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-utf32-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-utf32-0:10.48-0.1.hum1@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-89156"
},
{
"category": "external",
"summary": "RHBZ#2531743",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2531743"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-89156",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-89156"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-89156",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89156"
},
{
"category": "external",
"summary": "https://github.com/PCRE2Project/pcre2/releases/tag/pcre2-10.48",
"url": "https://github.com/PCRE2Project/pcre2/releases/tag/pcre2-10.48"
},
{
"category": "external",
"summary": "https://github.com/PCRE2Project/pcre2/security/advisories/GHSA-2p8c-ff85-vh9x",
"url": "https://github.com/PCRE2Project/pcre2/security/advisories/GHSA-2p8c-ff85-vh9x"
}
],
"release_date": "2026-09-11T04:03:05.876000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-15T12:05:29+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:pcre2-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-0:10.48-0.1.hum1@src",
"Red Hat Hardened Images:pcre2-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-devel-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-devel-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-static-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-static-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-syntax-0:10.48-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:pcre2-syntax-0:10.48-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:pcre2-tools-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-tools-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-utf16-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-utf16-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-utf32-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-utf32-0:10.48-0.1.hum1@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:67534"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Hardened Images:pcre2-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-0:10.48-0.1.hum1@src",
"Red Hat Hardened Images:pcre2-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-devel-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-devel-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-static-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-static-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-syntax-0:10.48-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:pcre2-syntax-0:10.48-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:pcre2-tools-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-tools-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-utf16-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-utf16-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-utf32-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-utf32-0:10.48-0.1.hum1@x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "LOW",
"baseScore": 2.9,
"baseSeverity": "LOW",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:pcre2-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-0:10.48-0.1.hum1@src",
"Red Hat Hardened Images:pcre2-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-devel-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-devel-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-static-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-static-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-syntax-0:10.48-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:pcre2-syntax-0:10.48-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:pcre2-tools-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-tools-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-utf16-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-utf16-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-utf32-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-utf32-0:10.48-0.1.hum1@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "PCRE2: PCRE2: Out-of-bounds read via invalid UTF data during JIT fallback"
},
{
"cve": "CVE-2026-89157",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"discovery_date": "2026-09-11T04:20:57.926410+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2531744"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in PCRE2. On 32-bit platforms, an attacker can provide a specially crafted large pattern, leading to an out-of-bounds write within the pcre2_pattern_convert function. This vulnerability can result in high integrity impact, such as data corruption, and potentially a low availability impact, causing a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "pcre2: PCRE2: Out-of-bounds write via large pattern input",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This out-of-bounds write vulnerability in PCRE2 on 32-bit platforms could lead to data corruption with high integrity impact and potential denial of service. Exploitation requires an attacker to provide a specially crafted large pattern, but no privileges or user interaction are needed.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:pcre2-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-0:10.48-0.1.hum1@src",
"Red Hat Hardened Images:pcre2-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-devel-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-devel-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-static-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-static-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-syntax-0:10.48-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:pcre2-syntax-0:10.48-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:pcre2-tools-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-tools-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-utf16-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-utf16-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-utf32-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-utf32-0:10.48-0.1.hum1@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-89157"
},
{
"category": "external",
"summary": "RHBZ#2531744",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2531744"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-89157",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-89157"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-89157",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89157"
},
{
"category": "external",
"summary": "https://github.com/PCRE2Project/pcre2/releases/tag/pcre2-10.48",
"url": "https://github.com/PCRE2Project/pcre2/releases/tag/pcre2-10.48"
},
{
"category": "external",
"summary": "https://github.com/PCRE2Project/pcre2/security/advisories/GHSA-q8g2-wprr-34m9",
"url": "https://github.com/PCRE2Project/pcre2/security/advisories/GHSA-q8g2-wprr-34m9"
}
],
"release_date": "2026-09-11T04:05:27.069000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-15T12:05:29+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:pcre2-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-0:10.48-0.1.hum1@src",
"Red Hat Hardened Images:pcre2-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-devel-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-devel-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-static-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-static-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-syntax-0:10.48-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:pcre2-syntax-0:10.48-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:pcre2-tools-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-tools-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-utf16-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-utf16-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-utf32-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-utf32-0:10.48-0.1.hum1@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:67534"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Hardened Images:pcre2-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-0:10.48-0.1.hum1@src",
"Red Hat Hardened Images:pcre2-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-devel-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-devel-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-static-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-static-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-syntax-0:10.48-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:pcre2-syntax-0:10.48-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:pcre2-tools-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-tools-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-utf16-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-utf16-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-utf32-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-utf32-0:10.48-0.1.hum1@x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "LOW",
"baseScore": 5.7,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:pcre2-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-0:10.48-0.1.hum1@src",
"Red Hat Hardened Images:pcre2-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-devel-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-devel-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-static-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-static-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-syntax-0:10.48-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:pcre2-syntax-0:10.48-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:pcre2-tools-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-tools-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-utf16-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-utf16-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-utf32-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-utf32-0:10.48-0.1.hum1@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "pcre2: PCRE2: Out-of-bounds write via large pattern input"
},
{
"cve": "CVE-2026-89158",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"discovery_date": "2026-09-11T04:21:03.968148+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2531746"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in PCRE2. On 32-bit platforms, an integer overflow in the `pcre2_compile_32` function can lead to an out-of-bounds write. This vulnerability could allow a remote attacker to achieve a high integrity impact and a low availability impact, potentially leading to data corruption or denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "PCRE2: PCRE2: Out-of-bounds write via integer overflow on 32-bit platforms",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A Moderate impact flaw was found in PCRE2 affecting 32-bit platforms, where an integer overflow in the `pcre2_compile_32` function can lead to an out-of-bounds write. While exploitable over the network without requiring user interaction or privileges, the high attack complexity reduces its overall severity. Successful exploitation could result in high integrity impact, such as data corruption, or a low availability impact, leading to a denial of service.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:pcre2-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-0:10.48-0.1.hum1@src",
"Red Hat Hardened Images:pcre2-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-devel-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-devel-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-static-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-static-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-syntax-0:10.48-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:pcre2-syntax-0:10.48-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:pcre2-tools-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-tools-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-utf16-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-utf16-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-utf32-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-utf32-0:10.48-0.1.hum1@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-89158"
},
{
"category": "external",
"summary": "RHBZ#2531746",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2531746"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-89158",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-89158"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-89158",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89158"
},
{
"category": "external",
"summary": "https://github.com/PCRE2Project/pcre2/releases/tag/pcre2-10.48",
"url": "https://github.com/PCRE2Project/pcre2/releases/tag/pcre2-10.48"
},
{
"category": "external",
"summary": "https://github.com/PCRE2Project/pcre2/security/advisories/GHSA-fmgr-6ggq-9859",
"url": "https://github.com/PCRE2Project/pcre2/security/advisories/GHSA-fmgr-6ggq-9859"
}
],
"release_date": "2026-09-11T04:07:21.973000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-15T12:05:29+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:pcre2-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-0:10.48-0.1.hum1@src",
"Red Hat Hardened Images:pcre2-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-devel-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-devel-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-static-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-static-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-syntax-0:10.48-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:pcre2-syntax-0:10.48-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:pcre2-tools-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-tools-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-utf16-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-utf16-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-utf32-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-utf32-0:10.48-0.1.hum1@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:67534"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Hardened Images:pcre2-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-0:10.48-0.1.hum1@src",
"Red Hat Hardened Images:pcre2-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-devel-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-devel-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-static-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-static-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-syntax-0:10.48-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:pcre2-syntax-0:10.48-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:pcre2-tools-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-tools-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-utf16-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-utf16-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-utf32-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-utf32-0:10.48-0.1.hum1@x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:pcre2-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-0:10.48-0.1.hum1@src",
"Red Hat Hardened Images:pcre2-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-devel-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-devel-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-static-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-static-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-syntax-0:10.48-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:pcre2-syntax-0:10.48-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:pcre2-tools-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-tools-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-utf16-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-utf16-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-utf32-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-utf32-0:10.48-0.1.hum1@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "PCRE2: PCRE2: Out-of-bounds write via integer overflow on 32-bit platforms"
},
{
"cve": "CVE-2026-89160",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2026-09-11T04:21:00.943707+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2531745"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in PCRE2, a library for processing regular expressions. A remote attacker could exploit this vulnerability by providing a specially crafted input that triggers an out-of-bounds read during pattern matching with invalid UTF (Unicode Transformation Format) characters. This could lead to a denial of service, making the affected system or application unavailable.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "pcre2: PCRE2: Denial of Service via out-of-bounds read during invalid UTF matching",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw is rated as Low impact. A denial of service could occur in applications utilizing PCRE2 for regular expression matching if specially crafted invalid UTF input is processed. The high attack complexity required to trigger this out-of-bounds read limits its overall impact on Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:pcre2-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-0:10.48-0.1.hum1@src",
"Red Hat Hardened Images:pcre2-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-devel-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-devel-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-static-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-static-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-syntax-0:10.48-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:pcre2-syntax-0:10.48-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:pcre2-tools-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-tools-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-utf16-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-utf16-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-utf32-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-utf32-0:10.48-0.1.hum1@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-89160"
},
{
"category": "external",
"summary": "RHBZ#2531745",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2531745"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-89160",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-89160"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-89160",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89160"
},
{
"category": "external",
"summary": "https://github.com/PCRE2Project/pcre2/releases/tag/pcre2-10.48",
"url": "https://github.com/PCRE2Project/pcre2/releases/tag/pcre2-10.48"
},
{
"category": "external",
"summary": "https://github.com/PCRE2Project/pcre2/security/advisories/GHSA-9qww-pwc4-77qq",
"url": "https://github.com/PCRE2Project/pcre2/security/advisories/GHSA-9qww-pwc4-77qq"
}
],
"release_date": "2026-09-11T04:09:06.527000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-15T12:05:29+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:pcre2-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-0:10.48-0.1.hum1@src",
"Red Hat Hardened Images:pcre2-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-devel-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-devel-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-static-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-static-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-syntax-0:10.48-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:pcre2-syntax-0:10.48-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:pcre2-tools-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-tools-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-utf16-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-utf16-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-utf32-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-utf32-0:10.48-0.1.hum1@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:67534"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Hardened Images:pcre2-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-0:10.48-0.1.hum1@src",
"Red Hat Hardened Images:pcre2-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-devel-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-devel-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-static-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-static-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-syntax-0:10.48-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:pcre2-syntax-0:10.48-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:pcre2-tools-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-tools-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-utf16-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-utf16-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-utf32-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-utf32-0:10.48-0.1.hum1@x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 3.7,
"baseSeverity": "LOW",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:pcre2-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-0:10.48-0.1.hum1@src",
"Red Hat Hardened Images:pcre2-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-devel-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-devel-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-static-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-static-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-syntax-0:10.48-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:pcre2-syntax-0:10.48-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:pcre2-tools-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-tools-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-utf16-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-utf16-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-utf32-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-utf32-0:10.48-0.1.hum1@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "pcre2: PCRE2: Denial of Service via out-of-bounds read during invalid UTF matching"
},
{
"cve": "CVE-2026-89161",
"cwe": {
"id": "CWE-1341",
"name": "Multiple Releases of Same Resource or Handle"
},
"discovery_date": "2026-09-11T04:21:06.963234+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2531747"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in PCRE2, a library for processing regular expressions. The `pcre2_jit_match` function, which handles just-in-time (JIT) compilation for regular expressions, incorrectly manages memory when processing certain inputs. This memory corruption vulnerability could allow a local attacker to cause the application to crash, leading to a denial of service, or potentially execute unauthorized code.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "pcre2: PCRE2: Memory corruption vulnerability in pcre2_jit_match",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important memory corruption vulnerability in PCRE2\u0027s JIT compiler. An attacker could exploit a flaw in `pcre2_jit_match` when a previously copied subject is passed as context, potentially leading to arbitrary code execution or denial of service. The high attack complexity and local attack vector reduce the overall risk, but the widespread use of PCRE2 and the potential for severe impact warrant the Important classification.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:pcre2-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-0:10.48-0.1.hum1@src",
"Red Hat Hardened Images:pcre2-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-devel-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-devel-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-static-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-static-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-syntax-0:10.48-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:pcre2-syntax-0:10.48-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:pcre2-tools-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-tools-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-utf16-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-utf16-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-utf32-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-utf32-0:10.48-0.1.hum1@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-89161"
},
{
"category": "external",
"summary": "RHBZ#2531747",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2531747"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-89161",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-89161"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-89161",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89161"
},
{
"category": "external",
"summary": "https://github.com/PCRE2Project/pcre2/pull/937",
"url": "https://github.com/PCRE2Project/pcre2/pull/937"
},
{
"category": "external",
"summary": "https://github.com/PCRE2Project/pcre2/releases/tag/pcre2-10.48",
"url": "https://github.com/PCRE2Project/pcre2/releases/tag/pcre2-10.48"
}
],
"release_date": "2026-09-11T04:11:51.666000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-15T12:05:29+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:pcre2-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-0:10.48-0.1.hum1@src",
"Red Hat Hardened Images:pcre2-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-devel-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-devel-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-static-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-static-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-syntax-0:10.48-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:pcre2-syntax-0:10.48-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:pcre2-tools-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-tools-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-utf16-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-utf16-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-utf32-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-utf32-0:10.48-0.1.hum1@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:67534"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Hardened Images:pcre2-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-0:10.48-0.1.hum1@src",
"Red Hat Hardened Images:pcre2-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-devel-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-devel-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-static-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-static-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-syntax-0:10.48-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:pcre2-syntax-0:10.48-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:pcre2-tools-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-tools-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-utf16-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-utf16-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-utf32-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-utf32-0:10.48-0.1.hum1@x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:pcre2-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-0:10.48-0.1.hum1@src",
"Red Hat Hardened Images:pcre2-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-devel-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-devel-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-static-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-static-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-syntax-0:10.48-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:pcre2-syntax-0:10.48-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:pcre2-tools-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-tools-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-utf16-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-utf16-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-utf32-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-utf32-0:10.48-0.1.hum1@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "pcre2: PCRE2: Memory corruption vulnerability in pcre2_jit_match"
},
{
"cve": "CVE-2026-89162",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2026-09-11T04:40:54.551251+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2531748"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in PCRE2. The `pcre2_serialize_encode` function might disclose two bytes of information to an attacker. This vulnerability typically occurs in scenarios where the attacker already has unsafe access to the system, making exploitation difficult. The primary impact is a limited information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "pcre2: PCRE2: Information disclosure via pcre2_serialize_encode",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is a information disclosure flaw in PCRE2. The vulnerability, which could expose two bytes of data, requires an adversary to have already gained unsafe access to the system, significantly limiting its exploitability in typical Red Hat deployments.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:pcre2-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-0:10.48-0.1.hum1@src",
"Red Hat Hardened Images:pcre2-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-devel-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-devel-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-static-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-static-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-syntax-0:10.48-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:pcre2-syntax-0:10.48-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:pcre2-tools-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-tools-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-utf16-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-utf16-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-utf32-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-utf32-0:10.48-0.1.hum1@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-89162"
},
{
"category": "external",
"summary": "RHBZ#2531748",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2531748"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-89162",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-89162"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-89162",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89162"
},
{
"category": "external",
"summary": "https://github.com/PCRE2Project/pcre2/releases/tag/pcre2-10.48",
"url": "https://github.com/PCRE2Project/pcre2/releases/tag/pcre2-10.48"
},
{
"category": "external",
"summary": "https://github.com/PCRE2Project/pcre2/security/advisories/GHSA-q7rw-r7qq-2hx6",
"url": "https://github.com/PCRE2Project/pcre2/security/advisories/GHSA-q7rw-r7qq-2hx6"
}
],
"release_date": "2026-09-11T04:15:04.246000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-15T12:05:29+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:pcre2-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-0:10.48-0.1.hum1@src",
"Red Hat Hardened Images:pcre2-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-devel-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-devel-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-static-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-static-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-syntax-0:10.48-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:pcre2-syntax-0:10.48-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:pcre2-tools-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-tools-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-utf16-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-utf16-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-utf32-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-utf32-0:10.48-0.1.hum1@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:67534"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Hardened Images:pcre2-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-0:10.48-0.1.hum1@src",
"Red Hat Hardened Images:pcre2-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-devel-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-devel-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-static-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-static-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-syntax-0:10.48-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:pcre2-syntax-0:10.48-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:pcre2-tools-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-tools-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-utf16-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-utf16-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-utf32-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-utf32-0:10.48-0.1.hum1@x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 2.9,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:pcre2-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-0:10.48-0.1.hum1@src",
"Red Hat Hardened Images:pcre2-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-devel-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-devel-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-static-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-static-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-syntax-0:10.48-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:pcre2-syntax-0:10.48-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:pcre2-tools-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-tools-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-utf16-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-utf16-0:10.48-0.1.hum1@x86_64",
"Red Hat Hardened Images:pcre2-utf32-0:10.48-0.1.hum1@aarch64",
"Red Hat Hardened Images:pcre2-utf32-0:10.48-0.1.hum1@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "pcre2: PCRE2: Information disclosure via pcre2_serialize_encode"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…