PCRE2 before 10.48 has a pcre2_match out-of-bounds read after a JIT fallback when an attacker can provide invalid UTF data.
"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-100065.json"