Known vulnerabilities in PCRE2

Vendor: PCRE
Software: PCRE2
Software CPE: cpe:2.3:a:pcre:pcre2:*:*:*:*:*:*:*:*
Website: https://www.pcre.org/
Total vulnerabilities: 8
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting PCRE2 PCRE2 is affected by 8 known vulnerabilities: 3 high, 5 medium Critical High Medium Low

Vulnerabilities (8)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU116129 - Out-of-bounds read
CVE-2025-58050		 CWE-125 Medium
No
No
 10.46 26.09.2025 SB2025092615
SB2025092617
SB2025101331
and 3 more
#VU79112 - Integer overflow
CVE-2022-41409		 CWE-190 Medium
No
No
 10.41 07.08.2023 SB2023080749
SB2023080750
SB2023081617
and 10 more
#VU65555 - Heap-based Buffer Overflow
CVE-2015-8381		 CWE-122 High
No
No
 10.20 20.07.2022 SB2015120208
SB2024032815
SB2024040818
and 11 more
#VU65553 - Out-of-bounds read
CVE-2022-1587		 CWE-125 Medium
No
No
 10.40 20.07.2022 SB2022060210
SB20220720108
SB2022072733
and 24 more
#VU63945 - Out-of-bounds read
CVE-2022-1586		 CWE-125 Medium
No
No
 10.40 02.06.2022 SB2022060210
SB2022071156
SB2022071217
and 71 more
#VU29116 - Out-of-bounds read
CVE-2019-20454		 CWE-125 Medium
No
No
 10.34 17.06.2020 SB2020021421
SB2020061707
SB2020110528
and 14 more
#VU39076 - Heap-based Buffer Overflow
CVE-2017-8786		 CWE-122 High
No
No
 - 05.05.2017 SB2017050513
SB2017100809
SB2017110113
and 1 more
#VU31422 - Memory corruption
CVE-2017-8399		 CWE-119 High
No
No
 10.30 01.05.2017 SB2017050106
SB2017100809