PCRE2 before 10.48 has a pcre2_match out-of-bounds read during the PCRE2_MATCH_INVALID_UTF matching of an invalid UTF subject.
"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-100056.json"