An out-of-bounds read was discovered in PCRE before 10.34 when the pattern \X is JIT compiled and used to match specially crafted subjects in non-UTF mode. Applications that use PCRE to parse untrusted input may be vulnerable to this flaw, which would allow an attacker to crash the application. The flaw occurs in do_extuni_no_utf in pcre2_jit_compile.c.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade php-pearUpgrade php-xmlrpcUpgrade php-soapUpgrade php-pecl-xdebugUpgrade php-mbstringUpgrade php-dbgUpgrade php-odbcUpgrade pcre2-toolsUpgrade php-jsonUpgrade php-pecl-apcuUpgrade php-pecl-zipUpgrade php-commonUpgrade php-pdoUpgrade php-fpmUpgrade php-pecl-apcu-develUpgrade php-pgsqlUpgrade php-develUpgrade php-gmpUpgrade php-dbaUpgrade php-snmpUpgrade phpUpgrade pcre2-develUpgrade php-xmlUpgrade php-bcmathUpgrade pcre2Upgrade libzip-develUpgrade php-pecl-rrdUpgrade pcre2-utf32Upgrade php-cliUpgrade php-recodeUpgrade apcu-panelUpgrade php-embeddedUpgrade php-gdUpgrade pcre2-utf16Upgrade php-opcacheUpgrade php-intlUpgrade php-enchantUpgrade php-processUpgrade php-ldapUpgrade libzipUpgrade libzip-toolsUpgrade php-mysqlnd | May 4, 2022 | Feb 14, 2020 |
| Centos_linux | — | Upgrade php-odbcUpgrade php-bcmathUpgrade php-mysqlnd-debuginfoUpgrade pcre2-utf32-debuginfoUpgrade pcre2-debugsourceUpgrade php-gd-debuginfoUpgrade php-cliUpgrade php-develUpgrade libzip-develUpgrade php-pecl-xdebug-debuginfoUpgrade php-gmp-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade php-fpmUpgrade php-enchant-debuginfoUpgrade php-snmpUpgrade php-gmpUpgrade pcre2-tools-debuginfoUpgrade pcre2-utf32Upgrade pcre2-utf16-debuginfoUpgrade php-common-debuginfoUpgrade php-xmlrpcUpgrade php-pecl-rrd-debuginfoUpgrade php-pecl-apcuUpgrade php-dbgUpgrade php-json-debuginfoUpgrade php-opcacheUpgrade php-commonUpgrade pcre2Upgrade php-xmlrpc-debuginfoUpgrade php-pearUpgrade pcre2-develUpgrade php-xmlUpgrade php-dba-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-pdoUpgrade php-mysqlndUpgrade pcre2-utf16Upgrade php-ldapUpgrade php-jsonUpgrade php-recodeUpgrade php-mbstring-debuginfoUpgrade php-pecl-xdebugUpgrade libzip-debuginfoUpgrade libzipUpgrade php-pecl-zip-debugsourceUpgrade php-recode-debuginfoUpgrade php-pecl-xdebug-debugsourceUpgrade php-gdUpgrade php-cli-debuginfoUpgrade php-opcache-debuginfoUpgrade php-bcmath-debuginfoUpgrade php-soapUpgrade php-debugsourceUpgrade libzip-tools-debuginfoUpgrade apcu-panelUpgrade php-ldap-debuginfoUpgrade php-pecl-apcu-develUpgrade php-fpm-debuginfoUpgrade php-xml-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-pecl-zipUpgrade php-pgsql-debuginfoUpgrade phpUpgrade php-intlUpgrade php-snmp-debuginfoUpgrade php-pgsqlUpgrade pcre2-debuginfoUpgrade php-odbc-debuginfoUpgrade php-process-debuginfoUpgrade php-enchantUpgrade php-intl-debuginfoUpgrade libzip-toolsUpgrade php-debuginfoUpgrade php-pecl-rrdUpgrade php-dbg-debuginfoUpgrade php-mbstringUpgrade php-embeddedUpgrade php-pdo-debuginfoUpgrade php-dbaUpgrade php-soap-debuginfoUpgrade php-processUpgrade libzip-debugsourceUpgrade php-pecl-apcu-debuginfoUpgrade php-embedded-debuginfo | Sep 9, 2020 | Feb 14, 2020 |
| Debian | — | Upgrade pcre2 | Mar 17, 2023 | Feb 14, 2020 |
| Dell Powerstore Dsa2023129 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Apr 4, 2023 |
| Dell Powerstore Dsa2023173 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Jun 21, 2023 |
| Gentoo Linux | — | Upgrade net-libs/pcre2. | Jun 16, 2020 | Feb 14, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade pcre2-develUpgrade pcre2-utf32Upgrade pcre2-utf16Upgrade pcre2 | Apr 21, 2020 | Feb 14, 2020 |
| Oracle Solaris | — | Upgrade library/pcre2 to version 10.34-11.4.21.0.1.69.0 on Solaris 11.4 | Jan 19, 2021 | Feb 14, 2020 |
| Oracle_linux | — | Upgrade pcre2-toolsUpgrade php-embeddedUpgrade php-soapUpgrade php-gdUpgrade php-odbcUpgrade php-intlUpgrade apcu-panelUpgrade libzipUpgrade php-gmpUpgrade libzip-toolsUpgrade php-jsonUpgrade php-pgsqlUpgrade php-pecl-rrdUpgrade php-pecl-zipUpgrade phpUpgrade php-dbaUpgrade php-pecl-apcu-develUpgrade php-enchantUpgrade php-processUpgrade php-develUpgrade php-snmpUpgrade pcre2-develUpgrade php-ldapUpgrade php-commonUpgrade pcre2Upgrade php-mysqlndUpgrade php-pecl-xdebugUpgrade php-xmlUpgrade php-pdoUpgrade php-pearUpgrade php-cliUpgrade php-bcmathUpgrade libzip-develUpgrade pcre2-utf32Upgrade pcre2-utf16Upgrade php-xmlrpcUpgrade php-pecl-apcuUpgrade php-opcacheUpgrade php-recodeUpgrade php-fpmUpgrade php-mbstringUpgrade php-dbg | Sep 10, 2020 | Jul 28, 2019 |
| Redhat_linux | — | Upgrade php-dba-debuginfoUpgrade php-commonUpgrade php-json-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-pecl-apcu-develUpgrade php-xmlrpcUpgrade php-process-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php-pearUpgrade php-develUpgrade pcre2-utf32-debuginfoUpgrade pcre2-debugsourceUpgrade php-pecl-xdebugUpgrade pcre2-toolsUpgrade libzipUpgrade php-gmpUpgrade php-processUpgrade php-xmlrpc-debuginfoUpgrade php-xml-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-pecl-rrdUpgrade libzip-tools-debuginfoUpgrade php-pecl-xdebug-debuginfoUpgrade php-pdo-debuginfoUpgrade php-gdUpgrade php-pecl-apcuUpgrade php-fpmUpgrade php-jsonUpgrade php-dbgUpgrade libzip-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-soapUpgrade php-dbaUpgrade php-pecl-zip-debuginfoUpgrade pcre2-debuginfoUpgrade php-gd-debuginfoUpgrade php-odbcUpgrade php-pdoUpgrade php-bcmathUpgrade libzip-debugsourceUpgrade php-intl-debuginfoUpgrade php-pecl-xdebug-debugsourceUpgrade php-pgsqlUpgrade php-cli-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-odbc-debuginfoUpgrade php-mbstringUpgrade php-enchantUpgrade php-pecl-zipUpgrade php-enchant-debuginfoUpgrade php-ldapUpgrade php-bcmath-debuginfoUpgrade php-cliUpgrade libzip-toolsUpgrade php-snmp-debuginfoUpgrade php-embedded-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade php-fpm-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-ldap-debuginfoUpgrade php-dbg-debuginfoUpgrade php-soap-debuginfoUpgrade pcre2-utf16-debuginfoUpgrade php-snmpUpgrade php-embeddedUpgrade php-xmlUpgrade php-opcacheUpgrade php-debuginfoUpgrade php-common-debuginfoUpgrade libzip-develUpgrade php-recode-debuginfoUpgrade php-recodeUpgrade php-opcache-debuginfoUpgrade php-mysqlndUpgrade pcre2-utf16Upgrade php-debugsourceUpgrade pcre2-tools-debuginfoUpgrade apcu-panelUpgrade php-pgsql-debuginfoUpgrade php-intlNo solution existsUpgrade pcre2-utf32Upgrade pcre2Upgrade pcre2-develUpgrade php-gmp-debuginfoUpgrade php | Sep 9, 2020 | Feb 14, 2020 |
| Rocky_linux | — | Upgrade php-bcmath-debuginfoUpgrade php-pecl-xdebug-debugsourceUpgrade pcre2-debugsourceUpgrade php-cliUpgrade php-processUpgrade php-mysqlndUpgrade php-mysqlnd-debuginfoUpgrade libzip-develUpgrade php-odbcUpgrade php-mbstringUpgrade php-intl-debuginfoUpgrade php-opcache-debuginfoUpgrade php-snmpUpgrade pcre2Upgrade php-soap-debuginfoUpgrade libzip-toolsUpgrade php-ldap-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade php-commonUpgrade php-recodeUpgrade php-xmlrpcUpgrade php-xmlUpgrade pcre2-develUpgrade php-dba-debuginfoUpgrade php-pgsql-debuginfoUpgrade pcre2-utf16-debuginfoUpgrade php-common-debuginfoUpgrade php-dbg-debuginfoUpgrade libzip-debuginfoUpgrade php-pecl-rrdUpgrade php-recode-debuginfoUpgrade pcre2-utf32Upgrade php-snmp-debuginfoUpgrade php-process-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-fpm-debuginfoUpgrade php-opcacheUpgrade php-json-debuginfoUpgrade pcre2-debuginfoUpgrade php-intlUpgrade php-debuginfoUpgrade php-embedded-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-soapUpgrade php-debugsourceUpgrade php-pecl-apcu-debuginfoUpgrade php-dbgUpgrade php-pecl-apcu-develUpgrade php-pecl-zipUpgrade php-gdUpgrade libzip-tools-debuginfoUpgrade php-dbaUpgrade pcre2-toolsUpgrade php-xml-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade libzipUpgrade php-jsonUpgrade php-pdoUpgrade php-pgsqlUpgrade php-pdo-debuginfoUpgrade pcre2-utf16Upgrade php-pecl-zip-debugsourceUpgrade php-gmpUpgrade php-bcmathUpgrade pcre2-tools-debuginfoUpgrade php-pecl-apcuUpgrade php-odbc-debuginfoUpgrade php-develUpgrade php-fpmUpgrade php-gd-debuginfoUpgrade libzip-debugsourceUpgrade php-embeddedUpgrade php-pecl-xdebug-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php-gmp-debuginfoUpgrade php-enchantUpgrade php-xmlrpc-debuginfoUpgrade pcre2-utf32-debuginfoUpgrade php-pecl-xdebugUpgrade php-enchant-debuginfoUpgrade php-cli-debuginfoUpgrade phpUpgrade php-ldap | Mar 12, 2024 | Feb 14, 2020 |
| Splunk | — | Upgrade Splunk Enterprise to version 8.2.12Upgrade Splunk Universal Forwarder to version 9.0.6Upgrade Splunk Enterprise to version 9.1.1Upgrade Splunk Universal Forwarder to version 8.2.12Upgrade Splunk Enterprise to version 9.0.6Upgrade Splunk Universal Forwarder to version 9.1.1 | Sep 30, 2025 | Feb 14, 2020 |
| Suse | — | Upgrade libpcre2-posix2Upgrade pcre2-toolsUpgrade libpcre2-32-0-32bitUpgrade pcre2-docUpgrade libpcre2-posix2-32bitUpgrade libpcre2-8-0Upgrade libpcre2-16-0-32bitUpgrade libpcre2-8-0-32bitUpgrade libpcre2-16-0Upgrade libpcre2-32-0Upgrade pcre2-devel-staticUpgrade pcre2-devel | Aug 9, 2024 | Feb 14, 2020 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Feb 14, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub