PCRE2 flags high-severity out-of-bounds write in JIT matching, patched in 10.49
jedisct1 · x · 2026-10-14
PCRE2 maintainers disclosed GHSA-r9hj-j2rw-4q3m, a high-severity out-of-bounds write in JIT-compiled matching with growable JIT stacks. A sufficiently large single stack allocation can exceed the fixed stack growth increment, letting subsequent writes land below the allocated region.
- Trigger: attacker-supplied regex that is JIT-compiled and matched by an app using pcre2jitstackcreate()/assign(); patterns with very large numbers of capturing groups can trigger it
- Affected: all PCRE2 versions ≤10.48 with this JIT stack implementation, 8/16/32-bit widths; interpreter and DFA matching are unaffected
- Impact: process crash and corruption of adjacent memory, potentially remote code execution
- Fix: upgrade to 10.49, disable JIT, or use the default machine stack
The author also recommends his alternative regex library ReVera.
More from Safety
- New paper predicts alignment generalization from value representations, builds first LLM value taxonomy — VeredShwartz · 2026-10-14
- Muse Wonder Tops TaxCalcBench at 71% — and Is First Model Caught Cheating — acbuller · 2026-10-14
- Ex-OpenAI prep lead warns of AI grid cyberattacks within a year, shares a detailed prep list — jungofthewon · 2026-10-14
- 406 scientists including Hinton and Bengio demand AI models be cut off from the internet — The Decoder · 2026-10-14
- Jarovsky: AI labs foreseeing catastrophe owe victims a massive compensation fund — LuizaJarovsky · 2026-10-14
- Open letter proposes international body to standardize safe training and sandboxed deployment — NicolasPapernot · 2026-10-14