Skip to content
OpenAdvisories
Medium USN-7777-1 1 CVE

pcre2 vulnerability

Published Sep 25, 2025 · Updated Oct 13, 2025

Ecosystem: Ubuntu

Summary

It was discovered that PCRE2 incorrectly handled the Scan SubString verb.
An attacker could possibly use this issue to cause applications using PCRE2
to expose sensitive information.

Fixed packages 1

ReleasePackageFixed in
Ubuntu · 25.04 pcre2 10.45-1ubuntu0.1

Vulnerabilities 1

  • Medium 6.9
    CVE-2025-58050

    PCRE2: heap-buffer-overflow read in match_ref due to missing boundary restoration in SCS

    The PCRE2 library is a set of C functions that implement regular expression pattern matching. In version 10.45, a heap-buffer-overflow read vulnerability exists in the PCRE2 regular expression matching engine, specifically within the handling of the (*scs:...…

    PCRE2Project pcre2 pcre2 pcre2 Debian Alpine PyPI

References

  • report
    https://ubuntu.com/security/CVE-2025-58050