libpcre in PCRE before 8.44 allows an integer overflow via a large number after a (?C substring.
{ "urgency": "not yet assigned" }