CVE-2020-14155

Medium

Published: —Translated: 06/07/2026(UTC)NVD NIST

Summary

The libpcre library in PCRE before version 8.44 is vulnerable to an integer overflow. The issue occurs when a large number is used after the (?C substring in a regular expression.

Risk Assessment

An attacker could exploit this vulnerability to cause unexpected behavior in applications using PCRE, potentially leading to denial of service or other unforeseen consequences.

Recommendation

Update the PCRE library to version 8.44 or later, which includes a fix for this vulnerability.

Original NVD description (English source)

libpcre in PCRE before 8.44 allows an integer overflow via a large number after a (?C substring.