CVE-2015-3210

Critical

Published: 13/12/2016(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Heap-based buffer overflow in PCRE versions 8.34 through 8.37 and PCRE2 10.10 allows remote attackers to execute arbitrary code via a crafted regular expression.

Risk Assessment

Attackers can exploit this vulnerability to execute remote code, potentially leading to system compromise or data leakage.

Recommendation

It is recommended to update to the latest version of PCRE to mitigate this vulnerability and to monitor systems for unauthorized activities.

Original NVD description (English source)

Heap-based buffer overflow in PCRE 8.34 through 8.37 and PCRE2 10.10 allows remote attackers to execute arbitrary code via a crafted regular expression, as demonstrated by /^(?P=B)((?P=B)(?J:(?P<B>c)(?P<B>a(?P=B)))>WGXCREDITS)/, a different vulnerability than CVE-2015-8384.