CVEvulnerability

CVE-2026-89162

3.3 LOW Published 2026-09-11 Modified 2026-09-16 Official page ↗
Status
Undergoing Analysis
Published
2026-09-11
Last modified
2026-09-16
Assigner
[email protected]
CVSS 3.1 ([email protected])
2.9 LOW — CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS 3.1 ([email protected])
3.3 LOW — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Weaknesses
CWE-669

Description

In PCRE2 before 10.48, pcre2_serialize_encode might disclose two bytes to an adversary, typically in a situation where the access available to the adversary is already unsafe.

Affected configurations

• pcre pcre2 (>= 10.45 < 10.48) • pcre pcre2 10.48

Related

Weakness · CWE (1)

  • CWE-669 Incorrect Resource Transfer Between Spheres weakness

References