CVE-2017-8399

Critical

Published: 01/05/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

PCRE2 before 10.30 has an out-of-bounds write caused by a stack-based buffer overflow in pcre2_match.c, related to a 'pattern with very many captures.'

Risk Assessment

Exploitation of this vulnerability may lead to unauthorized memory writes, potentially resulting in application crashes or system takeover.

Recommendation

It is recommended to upgrade to PCRE2 version 10.30 or later to mitigate this vulnerability.

Original NVD description (English source)

PCRE2 before 10.30 has an out-of-bounds write caused by a stack-based buffer overflow in pcre2_match.c, related to a "pattern with very many captures."