An out-of-bounds read was discovered in PCRE before 10.34 when the pattern \X is JIT compiled and used to match specially crafted subjects in non-UTF mode. Applications that use PCRE to parse untrusted input may be vulnerable to this flaw, which would allow an attacker to crash the application. The flaw occurs in do_extuni_no_utf in pcre2_jit_compile.c.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade phpUpgrade libzip-toolsUpgrade php-opcacheUpgrade libzipUpgrade php-ldapUpgrade php-xmlUpgrade php-pecl-rrdUpgrade php-bcmathUpgrade php-intlUpgrade php-cliUpgrade php-enchantUpgrade php-recodeUpgrade php-processUpgrade pcre2-utf32Upgrade pcre2Upgrade apcu-panelUpgrade php-snmpUpgrade php-mysqlndUpgrade libzip-develUpgrade pcre2-develUpgrade php-embeddedUpgrade php-gdUpgrade pcre2-utf16Upgrade pcre2-toolsUpgrade php-commonUpgrade php-fpmUpgrade php-mbstringUpgrade php-soapUpgrade php-pecl-xdebugUpgrade php-dbgUpgrade php-pecl-apcuUpgrade php-develUpgrade php-pdoUpgrade php-pearUpgrade php-gmpUpgrade php-jsonUpgrade php-pecl-zipUpgrade php-xmlrpcUpgrade php-odbcUpgrade php-pgsqlUpgrade php-pecl-apcu-develUpgrade php-dba | May 4, 2022 | Feb 14, 2020 |
| Centos_linux | — | Upgrade php-soapUpgrade php-bcmath-debuginfoUpgrade apcu-panelUpgrade php-debugsourceUpgrade php-gdUpgrade php-pdo-debuginfoUpgrade pcre2-debuginfoUpgrade php-embeddedUpgrade libzip-tools-debuginfoUpgrade php-embedded-debuginfoUpgrade php-pgsqlUpgrade php-odbc-debuginfoUpgrade php-snmp-debuginfoUpgrade php-pecl-rrdUpgrade php-pgsql-debuginfoUpgrade php-pecl-zipUpgrade php-pecl-apcu-develUpgrade php-opcache-debuginfoUpgrade php-ldap-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade phpUpgrade php-cli-debuginfoUpgrade php-intl-debuginfoUpgrade php-enchantUpgrade libzip-debugsourceUpgrade php-intlUpgrade libzip-toolsUpgrade php-dbg-debuginfoUpgrade php-fpm-debuginfoUpgrade php-xml-debuginfoUpgrade php-debuginfoUpgrade php-process-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-mbstringUpgrade php-dbaUpgrade php-processUpgrade php-soap-debuginfoUpgrade php-pecl-apcuUpgrade php-ldapUpgrade php-gd-debuginfoUpgrade libzip-debuginfoUpgrade php-recode-debuginfoUpgrade php-odbcUpgrade pcre2-utf16-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-bcmathUpgrade php-mysqlndUpgrade php-xmlrpc-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade pcre2-utf16Upgrade php-pecl-xdebugUpgrade php-opcacheUpgrade php-pecl-xdebug-debugsourceUpgrade libzipUpgrade pcre2-develUpgrade php-xmlUpgrade php-dba-debuginfoUpgrade libzip-develUpgrade php-gmp-debuginfoUpgrade php-fpmUpgrade php-enchant-debuginfoUpgrade php-pecl-xdebug-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade php-mbstring-debuginfoUpgrade php-jsonUpgrade php-pearUpgrade php-develUpgrade pcre2-debugsourceUpgrade pcre2-utf32-debuginfoUpgrade php-dbgUpgrade php-common-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php-xmlrpcUpgrade php-recodeUpgrade php-commonUpgrade pcre2-utf32Upgrade pcre2Upgrade php-cliUpgrade php-snmpUpgrade php-json-debuginfoUpgrade php-gmpUpgrade php-pdoUpgrade pcre2-tools-debuginfo | Sep 9, 2020 | Feb 14, 2020 |
| Debian | — | Upgrade pcre2 | Mar 17, 2023 | Feb 14, 2020 |
| Dell Powerstore Dsa2023129 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Apr 4, 2023 |
| Dell Powerstore Dsa2023173 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Jun 21, 2023 |
| Gentoo Linux | — | Upgrade net-libs/pcre2. | Jun 16, 2020 | Feb 14, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade pcre2-utf32Upgrade pcre2-utf16Upgrade pcre2-develUpgrade pcre2 | Apr 21, 2020 | Feb 14, 2020 |
| Oracle Solaris | — | Upgrade library/pcre2 to version 10.34-11.4.21.0.1.69.0 on Solaris 11.4 | Jan 19, 2021 | Feb 14, 2020 |
| Oracle_linux | — | Upgrade php-fpmUpgrade pcre2-develUpgrade php-develUpgrade pcre2-utf16Upgrade php-pdoUpgrade php-xmlrpcUpgrade php-xmlUpgrade php-ldapUpgrade php-pecl-xdebugUpgrade php-snmpUpgrade pcre2-utf32Upgrade php-commonUpgrade php-dbgUpgrade php-mbstringUpgrade php-opcacheUpgrade libzip-develUpgrade php-pecl-apcuUpgrade php-mysqlndUpgrade pcre2Upgrade php-bcmathUpgrade php-cliUpgrade php-pearUpgrade php-recodeUpgrade php-pecl-rrdUpgrade libzipUpgrade php-intlUpgrade pcre2-toolsUpgrade php-gdUpgrade php-embeddedUpgrade libzip-toolsUpgrade php-gmpUpgrade phpUpgrade php-dbaUpgrade php-odbcUpgrade php-soapUpgrade apcu-panelUpgrade php-processUpgrade php-pgsqlUpgrade php-pecl-apcu-develUpgrade php-enchantUpgrade php-pecl-zipUpgrade php-json | Sep 10, 2020 | Jul 28, 2019 |
| Redhat_linux | — | Upgrade php-pecl-rrdUpgrade libzip-debugsourceUpgrade php-bcmathUpgrade php-gdUpgrade php-cli-debuginfoUpgrade php-pecl-xdebug-debugsourceUpgrade php-dba-debuginfoUpgrade php-fpmUpgrade libzip-tools-debuginfoUpgrade php-xml-debuginfoUpgrade pcre2-utf32-debuginfoUpgrade php-intl-debuginfoUpgrade php-gd-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-pearUpgrade php-pdo-debuginfoUpgrade php-xmlrpcUpgrade php-mbstringUpgrade php-process-debuginfoUpgrade libzip-debuginfoUpgrade php-develUpgrade php-pecl-apcu-develUpgrade pcre2-debugsourceUpgrade php-pgsqlUpgrade php-xmlrpc-debuginfoUpgrade php-gmpUpgrade php-mbstring-debuginfoUpgrade php-processUpgrade php-pdoUpgrade pcre2-toolsUpgrade libzipUpgrade php-pecl-apcuUpgrade php-pecl-zipUpgrade php-pecl-zip-debugsourceUpgrade php-commonUpgrade php-odbcUpgrade php-pecl-zip-debuginfoUpgrade php-enchantUpgrade php-dbaUpgrade php-odbc-debuginfoUpgrade php-enchant-debuginfoUpgrade php-json-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-pecl-xdebug-debuginfoUpgrade php-pecl-xdebugUpgrade php-jsonUpgrade php-soapUpgrade pcre2-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php-dbgUpgrade php-gmp-debuginfoUpgrade php-mysqlndUpgrade php-intlUpgrade php-fpm-debuginfoUpgrade php-embeddedUpgrade pcre2-develUpgrade php-soap-debuginfoUpgrade pcre2-utf16Upgrade php-debugsourceUpgrade php-ldapUpgrade php-dbg-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade pcre2Upgrade php-bcmath-debuginfoUpgrade php-embedded-debuginfoUpgrade phpUpgrade php-snmpUpgrade pcre2-utf16-debuginfoUpgrade php-recode-debuginfoUpgrade php-opcache-debuginfoUpgrade php-opcacheUpgrade php-xmlUpgrade libzip-develUpgrade php-debuginfoUpgrade libzip-toolsUpgrade apcu-panelUpgrade php-recodeNo solution existsUpgrade php-snmp-debuginfoUpgrade php-cliUpgrade pcre2-utf32Upgrade php-pecl-rrd-debugsourceUpgrade php-pgsql-debuginfoUpgrade pcre2-tools-debuginfoUpgrade php-ldap-debuginfoUpgrade php-common-debuginfo | Sep 9, 2020 | Feb 14, 2020 |
| Rocky_linux | — | Upgrade php-pecl-apcu-debuginfoUpgrade php-pecl-xdebugUpgrade php-pecl-apcu-develUpgrade php-develUpgrade php-fpmUpgrade php-enchant-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade php-pgsqlUpgrade php-pdoUpgrade phpUpgrade php-pecl-zip-debuginfoUpgrade php-cli-debuginfoUpgrade php-embeddedUpgrade php-debugsourceUpgrade pcre2-toolsUpgrade php-dbaUpgrade libzip-tools-debuginfoUpgrade php-soapUpgrade php-pecl-zipUpgrade php-xml-debuginfoUpgrade libzip-debugsourceUpgrade php-pdo-debuginfoUpgrade php-dbgUpgrade php-ldapUpgrade pcre2-utf32-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade libzipUpgrade php-jsonUpgrade php-gdUpgrade pcre2-utf16Upgrade php-embedded-debuginfoUpgrade php-gmp-debuginfoUpgrade php-enchantUpgrade php-pecl-xdebug-debuginfoUpgrade php-odbc-debuginfoUpgrade pcre2-tools-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php-pecl-apcuUpgrade php-gd-debuginfoUpgrade php-gmpUpgrade php-bcmathUpgrade php-pecl-zip-debugsourceUpgrade libzip-develUpgrade php-intl-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-mbstringUpgrade php-snmpUpgrade php-debuginfoUpgrade php-json-debuginfoUpgrade pcre2-debuginfoUpgrade php-soap-debuginfoUpgrade php-fpm-debuginfoUpgrade php-opcacheUpgrade pcre2Upgrade php-common-debuginfoUpgrade pcre2-utf32Upgrade php-pgsql-debuginfoUpgrade libzip-debuginfoUpgrade php-xmlrpcUpgrade pcre2-utf16-debuginfoUpgrade php-pecl-xdebug-debugsourceUpgrade php-bcmath-debuginfoUpgrade php-commonUpgrade pcre2-debugsourceUpgrade php-xmlUpgrade pcre2-develUpgrade libzip-toolsUpgrade php-pecl-rrd-debugsourceUpgrade php-pecl-rrdUpgrade php-dbg-debuginfoUpgrade php-dba-debuginfoUpgrade php-recodeUpgrade php-ldap-debuginfoUpgrade php-recode-debuginfoUpgrade php-snmp-debuginfoUpgrade php-process-debuginfoUpgrade php-intlUpgrade php-processUpgrade php-opcache-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-odbcUpgrade php-mysqlndUpgrade php-cli | Mar 12, 2024 | Feb 14, 2020 |
| Splunk | — | Upgrade Splunk Universal Forwarder to version 9.1.1Upgrade Splunk Enterprise to version 9.0.6Upgrade Splunk Universal Forwarder to version 8.2.12Upgrade Splunk Universal Forwarder to version 9.0.6Upgrade Splunk Enterprise to version 8.2.12Upgrade Splunk Enterprise to version 9.1.1 | Sep 30, 2025 | Feb 14, 2020 |
| Suse | — | Upgrade libpcre2-8-0-32bitUpgrade pcre2-docUpgrade libpcre2-posix2-32bitUpgrade libpcre2-32-0-32bitUpgrade libpcre2-8-0Upgrade pcre2-toolsUpgrade libpcre2-16-0-32bitUpgrade libpcre2-posix2Upgrade libpcre2-32-0Upgrade libpcre2-16-0Upgrade pcre2-develUpgrade pcre2-devel-static | Aug 9, 2024 | Feb 14, 2020 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Feb 14, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub