/
DirectorySecurity Advisories
Sign In
Security Advisories

CVE-2022-1586

Published

Last updated

NVD

https://nvd.nist.gov/vuln/detail/CVE-2022-1586

CGA ID

CGA-cch6-mjqf-c45j

Severity

9.1

Critical

CVSS V3

Description

An out-of-bounds read vulnerability was discovered in the PCRE2 library in the compile_xclass_matchingpath() function of the pcre2_jit_compile.c file. This involves a unicode property matching issue in JIT-compiled regular expressions. The issue occurs because the character was not fully read in case-less matching within JIT.

References

Affected packages


Safe Source for Open Sourceâ„¢
Media KitContact Us
© 2024 Chainguard. All Rights Reserved.
Private PolicyTerms of Use

Product

Chainguard Images