An out-of-bounds read was discovered in PCRE before 10.34 when the pattern \X is JIT compiled and used to match specially crafted subjects in non-UTF mode. Applications that use PCRE to parse untrusted input may be vulnerable to this flaw, which would allow an attacker to crash the application. The flaw occurs in do_extuni_no_utf in pcre2_jit_compile.c.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libzip-develUpgrade pcre2Upgrade apcu-panelUpgrade libzip-toolsUpgrade php-recodeUpgrade php-processUpgrade php-mysqlndUpgrade pcre2-develUpgrade php-embeddedUpgrade php-opcacheUpgrade pcre2-utf16Upgrade phpUpgrade php-enchantUpgrade php-gdUpgrade php-pecl-rrdUpgrade php-intlUpgrade php-cliUpgrade php-bcmathUpgrade php-snmpUpgrade php-xmlUpgrade pcre2-utf32Upgrade libzipUpgrade php-ldapUpgrade php-develUpgrade php-pdoUpgrade php-soapUpgrade php-pecl-xdebugUpgrade php-commonUpgrade php-fpmUpgrade php-dbaUpgrade php-pecl-apcu-develUpgrade php-xmlrpcUpgrade php-pecl-apcuUpgrade php-gmpUpgrade php-odbcUpgrade php-pgsqlUpgrade php-pearUpgrade php-pecl-zipUpgrade pcre2-toolsUpgrade php-mbstringUpgrade php-dbgUpgrade php-json | May 4, 2022 | Feb 14, 2020 |
| Centos_linux | — | Upgrade php-intl-debuginfoUpgrade php-pecl-zipUpgrade libzip-debugsourceUpgrade php-opcache-debuginfoUpgrade php-pdo-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-xml-debuginfoUpgrade php-pecl-rrdUpgrade php-cli-debuginfoUpgrade libzip-toolsUpgrade php-processUpgrade php-ldap-debuginfoUpgrade apcu-panelUpgrade php-debugsourceUpgrade php-intlUpgrade php-pgsqlUpgrade php-soapUpgrade php-snmp-debuginfoUpgrade php-odbc-debuginfoUpgrade phpUpgrade php-gdUpgrade php-embeddedUpgrade libzip-tools-debuginfoUpgrade php-embedded-debuginfoUpgrade php-process-debuginfoUpgrade php-bcmath-debuginfoUpgrade pcre2-debuginfoUpgrade php-enchantUpgrade php-pecl-apcu-debuginfoUpgrade php-pecl-apcu-develUpgrade php-dbg-debuginfoUpgrade php-soap-debuginfoUpgrade php-mbstringUpgrade php-fpm-debuginfoUpgrade php-dbaUpgrade php-xmlrpcUpgrade php-json-debuginfoUpgrade libzip-debuginfoUpgrade php-pecl-xdebug-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php-gmp-debuginfoUpgrade php-gmpUpgrade pcre2-tools-debuginfoUpgrade php-snmpUpgrade php-xmlUpgrade php-pecl-xdebug-debugsourceUpgrade php-mbstring-debuginfoUpgrade php-jsonUpgrade php-recodeUpgrade php-develUpgrade libzip-develUpgrade pcre2-utf16-debuginfoUpgrade php-pecl-apcuUpgrade pcre2-debugsourceUpgrade php-xmlrpc-debuginfoUpgrade php-pearUpgrade pcre2-utf32-debuginfoUpgrade php-ldapUpgrade php-mysqlndUpgrade php-enchant-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade php-pdoUpgrade php-recode-debuginfoUpgrade php-cliUpgrade php-dba-debuginfoUpgrade libzipUpgrade pcre2-develUpgrade pcre2-utf16Upgrade php-pecl-xdebugUpgrade php-mysqlnd-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-opcacheUpgrade php-dbgUpgrade php-odbcUpgrade php-bcmathUpgrade php-fpmUpgrade php-commonUpgrade pcre2-utf32Upgrade php-gd-debuginfoUpgrade pcre2Upgrade php-pecl-zip-debugsourceUpgrade php-common-debuginfo | Sep 9, 2020 | Feb 14, 2020 |
| Debian | — | Upgrade pcre2 | Mar 17, 2023 | Feb 14, 2020 |
| Dell Powerstore Dsa2023129 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Apr 4, 2023 |
| Dell Powerstore Dsa2023173 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Jun 21, 2023 |
| Gentoo Linux | — | Upgrade net-libs/pcre2. | Jun 16, 2020 | Feb 14, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade pcre2-develUpgrade pcre2-utf16Upgrade pcre2-utf32Upgrade pcre2 | Apr 21, 2020 | Feb 14, 2020 |
| Oracle Solaris | — | Upgrade library/pcre2 to version 10.34-11.4.21.0.1.69.0 on Solaris 11.4 | Jan 19, 2021 | Feb 14, 2020 |
| Oracle_linux | — | Upgrade php-pgsqlUpgrade libzip-toolsUpgrade php-processUpgrade libzipUpgrade pcre2-toolsUpgrade php-pecl-apcu-develUpgrade php-enchantUpgrade php-dbaUpgrade php-pecl-zipUpgrade phpUpgrade php-odbcUpgrade php-gdUpgrade php-intlUpgrade php-jsonUpgrade php-embeddedUpgrade php-pecl-rrdUpgrade apcu-panelUpgrade php-gmpUpgrade php-soapUpgrade php-recodeUpgrade php-dbgUpgrade php-fpmUpgrade php-xmlUpgrade php-pecl-xdebugUpgrade php-ldapUpgrade php-snmpUpgrade php-mbstringUpgrade php-commonUpgrade libzip-develUpgrade php-pdoUpgrade php-develUpgrade pcre2-develUpgrade pcre2-utf32Upgrade pcre2-utf16Upgrade php-pecl-apcuUpgrade php-bcmathUpgrade php-pearUpgrade php-cliUpgrade php-xmlrpcUpgrade php-opcacheUpgrade pcre2Upgrade php-mysqlnd | Sep 10, 2020 | Jul 28, 2019 |
| Redhat_linux | — | Upgrade php-snmpUpgrade php-snmp-debuginfoUpgrade php-debugsourceUpgrade php-soap-debuginfoUpgrade php-embeddedUpgrade php-embedded-debuginfoUpgrade pcre2-utf16Upgrade php-pecl-rrd-debugsourceUpgrade phpUpgrade pcre2-develUpgrade php-cliUpgrade php-recodeUpgrade pcre2Upgrade php-gmp-debuginfoUpgrade php-dbg-debuginfoUpgrade libzip-develUpgrade php-common-debuginfoUpgrade php-debuginfoUpgrade php-ldapUpgrade pcre2-utf16-debuginfoUpgrade php-fpm-debuginfoUpgrade php-xmlUpgrade libzip-toolsUpgrade php-bcmath-debuginfoUpgrade php-opcacheUpgrade php-pecl-apcu-debuginfoUpgrade pcre2-utf32No solution existsUpgrade pcre2-tools-debuginfoUpgrade apcu-panelUpgrade php-opcache-debuginfoUpgrade php-mysqlndUpgrade php-recode-debuginfoUpgrade php-ldap-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-intlUpgrade php-odbcUpgrade php-jsonUpgrade php-gdUpgrade php-fpmUpgrade php-pecl-rrdUpgrade php-dba-debuginfoUpgrade libzip-tools-debuginfoUpgrade pcre2-debuginfoUpgrade php-cli-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade php-xmlrpcUpgrade php-mbstring-debuginfoUpgrade php-xml-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-bcmathUpgrade pcre2-debugsourceUpgrade php-pecl-apcu-debugsourceUpgrade php-enchantUpgrade php-pecl-zipUpgrade php-mbstringUpgrade php-pecl-xdebugUpgrade php-pecl-xdebug-debugsourceUpgrade php-pecl-apcuUpgrade pcre2-toolsUpgrade php-soapUpgrade php-json-debuginfoUpgrade php-pecl-xdebug-debuginfoUpgrade php-dbaUpgrade pcre2-utf32-debuginfoUpgrade php-gmpUpgrade php-pdoUpgrade php-process-debuginfoUpgrade php-pecl-apcu-develUpgrade libzip-debuginfoUpgrade php-pgsqlUpgrade php-intl-debuginfoUpgrade php-enchant-debuginfoUpgrade php-pdo-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-dbgUpgrade libzipUpgrade libzip-debugsourceUpgrade php-odbc-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php-pearUpgrade php-gd-debuginfoUpgrade php-commonUpgrade php-processUpgrade php-develUpgrade php-mysqlnd-debuginfo | Sep 9, 2020 | Feb 14, 2020 |
| Rocky_linux | — | Upgrade php-ldap-debuginfoUpgrade php-recodeUpgrade php-processUpgrade libzip-toolsUpgrade php-pecl-rrdUpgrade php-snmpUpgrade php-dba-debuginfoUpgrade php-cliUpgrade php-mysqlndUpgrade php-pecl-xdebug-debugsourceUpgrade php-bcmath-debuginfoUpgrade php-dbg-debuginfoUpgrade pcre2-debugsourceUpgrade php-pecl-rrd-debugsourceUpgrade php-intlUpgrade php-process-debuginfoUpgrade php-fpm-debuginfoUpgrade php-xmlUpgrade php-mbstring-debuginfoUpgrade php-opcacheUpgrade php-recode-debuginfoUpgrade php-snmp-debuginfoUpgrade pcre2-develUpgrade libzip-develUpgrade php-json-debuginfoUpgrade php-mbstringUpgrade php-mysqlnd-debuginfoUpgrade php-odbcUpgrade libzip-debuginfoUpgrade php-opcache-debuginfoUpgrade php-common-debuginfoUpgrade php-commonUpgrade php-soap-debuginfoUpgrade pcre2-debuginfoUpgrade php-debuginfoUpgrade php-intl-debuginfoUpgrade php-pgsql-debuginfoUpgrade pcre2Upgrade pcre2-utf16-debuginfoUpgrade pcre2-utf32Upgrade php-xmlrpcUpgrade php-pecl-zipUpgrade php-embedded-debuginfoUpgrade php-pecl-xdebug-debuginfoUpgrade php-debugsourceUpgrade php-xml-debuginfoUpgrade libzipUpgrade php-pecl-rrd-debuginfoUpgrade php-gmp-debuginfoUpgrade php-enchantUpgrade php-pecl-zip-debuginfoUpgrade php-pdoUpgrade php-odbc-debuginfoUpgrade pcre2-tools-debuginfoUpgrade php-gmpUpgrade php-bcmathUpgrade php-pecl-apcuUpgrade pcre2-utf16Upgrade php-soapUpgrade php-pecl-apcu-debuginfoUpgrade php-enchant-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-embeddedUpgrade php-pgsqlUpgrade php-ldapUpgrade php-cli-debuginfoUpgrade php-pecl-apcu-develUpgrade php-pecl-xdebugUpgrade php-dbgUpgrade php-fpmUpgrade phpUpgrade pcre2-utf32-debuginfoUpgrade php-develUpgrade php-xmlrpc-debuginfoUpgrade php-pdo-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade pcre2-toolsUpgrade libzip-tools-debuginfoUpgrade php-gdUpgrade php-gd-debuginfoUpgrade php-dbaUpgrade libzip-debugsourceUpgrade php-json | Mar 12, 2024 | Feb 14, 2020 |
| Splunk | — | Upgrade Splunk Universal Forwarder to version 9.1.1Upgrade Splunk Enterprise to version 9.0.6Upgrade Splunk Enterprise to version 8.2.12Upgrade Splunk Enterprise to version 9.1.1Upgrade Splunk Universal Forwarder to version 9.0.6Upgrade Splunk Universal Forwarder to version 8.2.12 | Sep 30, 2025 | Feb 14, 2020 |
| Suse | — | Upgrade pcre2-devel-staticUpgrade libpcre2-16-0Upgrade libpcre2-32-0Upgrade pcre2-develUpgrade libpcre2-posix2Upgrade libpcre2-16-0-32bitUpgrade libpcre2-8-0Upgrade libpcre2-posix2-32bitUpgrade pcre2-toolsUpgrade libpcre2-32-0-32bitUpgrade pcre2-docUpgrade libpcre2-8-0-32bit | Aug 9, 2024 | Feb 14, 2020 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Feb 14, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub