AZL-99726
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-99726.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-99726
- Upstream
- Published
- 2026-09-05T06:17:10Z
- Modified
- 2026-09-06T14:18:06.629088580Z
- Summary
- CVE-2026-86145 affecting package pcre2 10.42-3
- Details
-
PCRE2 before 10.48 allows a pcre2dfamatch out-of-bounds write because reuse of a cached workspace block, in a recursive DFA matching workspace, lacks a size check (even though a newly allocated block, for the same purpose, does have a size check). This outcome requires an attacker-controlled regular expression, or a recursive pattern in conjunction with a small heap limit (this can be set through the API).
- References