Every CVESearch/Get API key

CVE-2025-58050

PCRE2: heap-buffer-overflow read in match_ref due to missing boundary restoration in SCS

6.9 MediumFix available

The PCRE2 library is a set of C functions that implement regular expression pattern matching. In version 10.45, a heap-buffer-overflow read vulnerability exists in the PCRE2 regular expression matching engine, specifically within the handling of the (*scs:...) (Scan SubString) verb when combined with (*ACCEPT) in src/pcre2_match.c. This vulnerability may potentially lead to information disclosure if the out-of-bounds data read during the memcmp affects the final match result in a way observable by the attacker. This issue has been resolved in version 10.46.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
Low
Integrity
None
Availability
Low

Exploit likelihood

0.86%Up 0.8 points since Aug 28, 2025
90%50%10%1%

What each source reports

CVE List Score used6.9

PCRE2: heap-buffer-overflow read in match_ref due to missing boundary restoration in SCS

The PCRE2 library is a set of C functions that implement regular expression pattern matching. In version 10.45, a heap-buffer-overflow read vulnerability exists in the PCRE2 regular expression matching engine, specifically within the handling of the (*scs:...) (Scan SubString) verb when combined with (*ACCEPT) in src/pcre2_match.c. This vulnerability may potentially lead to information disclosure if the out-of-bounds data read during the memcmp affects the final match result in a way observable by the attacker. This issue has been resolved in version 10.46.

Record
CVE-2025-58050
CVSS 4.0
6.9 MediumCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:L/SC:L/SI:N/SA:L
Weakness
CWE-125, CWE-122
Updated
2026-11-02
EUVDEUVD-2025-259476.9

The PCRE2 library is a set of C functions that implement regular expression pattern matching. In version 10.45, a heap-buffer-overflow read vulnerability exists in the PCRE2 regular expression matching engine, specifically within the handling of the (*scs:...) (Scan SubString) verb when combined with (*ACCEPT) in src/pcre2_match.c. This vulnerability may potentially lead to information disclosure if the out-of-bounds data read during the memcmp affects the final match result in a way observable by the attacker. This issue has been resolved in version 10.46.

Record
EUVD-2025-25947
CVSS 4.0
6.9 MediumCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:L/SC:L/SI:N/SA:L
Updated
2026-11-02
NVD6.9

The PCRE2 library is a set of C functions that implement regular expression pattern matching. In version 10.45, a heap-buffer-overflow read vulnerability exists in the PCRE2 regular expression matching engine, specifically within the handling of the (*scs:...) (Scan SubString) verb when combined with (*ACCEPT) in src/pcre2_match.c. This vulnerability may potentially lead to information disclosure if the out-of-bounds data read during the memcmp affects the final match result in a way observable by the attacker. This issue has been resolved in version 10.46.

Record
CVE-2025-58050
CVSS 4.0
6.9 MediumCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:L/SC:L/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Weakness
CWE-122, CWE-125, CWE-787
Updated
2026-11-02
OSVALPINE-CVE-2025-580509.1

The PCRE2 library is a set of C functions that implement regular expression pattern matching. In version 10.45, a heap-buffer-overflow read vulnerability exists in the PCRE2 regular expression matching engine, specifically within the handling of the (*scs:...) (Scan SubString) verb when combined with (*ACCEPT) in src/pcre2_match.c. This vulnerability may potentially lead to information disclosure if the out-of-bounds data read during the memcmp affects the final match result in a way observable by the attacker. This issue has been resolved in version 10.46.

Record
ALPINE-CVE-2025-58050
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-02
OSVBELL-CVE-2025-580509.1
Record
BELL-CVE-2025-58050
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-02
OSV6.9

PCRE2: heap-buffer-overflow read in match_ref due to missing boundary restoration in SCS

The PCRE2 library is a set of C functions that implement regular expression pattern matching. In version 10.45, a heap-buffer-overflow read vulnerability exists in the PCRE2 regular expression matching engine, specifically within the handling of the (*scs:...) (Scan SubString) verb when combined with (*ACCEPT) in src/pcre2_match.c. This vulnerability may potentially lead to information disclosure if the out-of-bounds data read during the memcmp affects the final match result in a way observable by the attacker. This issue has been resolved in version 10.46.

Record
CVE-2025-58050
CVSS 4.0
6.9 MediumCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:L/SC:L/SI:N/SA:L
Weakness
CWE-122, CWE-125
Updated
2026-11-02
Show 10 moreShow less
OSVDEBIAN-CVE-2025-580509.1

The PCRE2 library is a set of C functions that implement regular expression pattern matching. In version 10.45, a heap-buffer-overflow read vulnerability exists in the PCRE2 regular expression matching engine, specifically within the handling of the (*scs:...) (Scan SubString) verb when combined with (*ACCEPT) in src/pcre2_match.c. This vulnerability may potentially lead to information disclosure if the out-of-bounds data read during the memcmp affects the final match result in a way observable by the attacker. This issue has been resolved in version 10.46.

Record
DEBIAN-CVE-2025-58050
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-02
OSVJLSEC-2026-606.9

The PCRE2 library is a set of C functions that implement regular expression pattern matching. In version 10.45, a heap-buffer-overflow read vulnerability exists in the PCRE2 regular expression matching engine, specifically within the handling of the (*scs:...) (Scan SubString) verb when combined with (*ACCEPT) in src/pcre2_match.c. This vulnerability may potentially lead to information disclosure if the out-of-bounds data read during the memcmp affects the final match result in a way observable by the attacker. This issue has been resolved in version 10.46.

Record
JLSEC-2026-60
CVSS 4.0
6.9 MediumCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:L/SC:L/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-02
OSVPYSEC-2025-2599.1

The PCRE2 library is a set of C functions that implement regular expression pattern matching. In version 10.45, a heap-buffer-overflow read vulnerability exists in the PCRE2 regular expression matching engine, specifically within the handling of the (*scs:...) (Scan SubString) verb when combined with (*ACCEPT) in src/pcre2_match.c. This vulnerability may potentially lead to information disclosure if the out-of-bounds data read during the memcmp affects the final match result in a way observable by the attacker. This issue has been resolved in version 10.46.

Record
PYSEC-2025-259
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-02
OSVROOT-OS-UBUNTU-2204-CVE-2025-580509.1

CVE-2025-58050 in pcre2 - Patched by Root

Root has patched CVE-2025-58050 in the pcre2 package for Root:Ubuntu:22.04. Multiple fixed versions available.

Record
ROOT-OS-UBUNTU-2204-CVE-2025-58050
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-04
OSVUBUNTU-CVE-2025-580506.9

The PCRE2 library is a set of C functions that implement regular expression pattern matching. In version 10.45, a heap-buffer-overflow read vulnerability exists in the PCRE2 regular expression matching engine, specifically within the handling of the (*scs:...) (Scan SubString) verb when combined with (*ACCEPT) in src/pcre2_match.c. This vulnerability may potentially lead to information disclosure if the out-of-bounds data read during the memcmp affects the final match result in a way observable by the attacker. This issue has been resolved in version 10.46.

Record
UBUNTU-CVE-2025-58050
CVSS 4.0
6.9 MediumCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:L/SC:L/SI:N/SA:L
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-02
OSVopenSUSE-SU-2025:15501-1No score

libpcre2-16-0-10.46-1.1 on GA media

These are all security issues fixed in the libpcre2-16-0-10.46-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2025:15501-1
Updated
2026-11-02
OSVopenSUSE-SU-2026:20512-1No score

Security update for pcre2

This update for pcre2 fixes the following issue:

  • CVE-2025-58050: integer overflow leads to heap buffer overread in match_ref due to missing boundary restoration in SCS (bsc#1248842).
Record
openSUSE-SU-2026:20512-1
Updated
2026-11-02
OSVSUSE-SU-2026:21094-1No score

Security update for pcre2

This update for pcre2 fixes the following issue:

  • CVE-2025-58050: integer overflow leads to heap buffer overread in match_ref due to missing boundary restoration in SCS (bsc#1248842).
Record
SUSE-SU-2026:21094-1
Updated
2026-11-02
OSVSUSE-SU-2026:21172-1No score

Security update for pcre2

This update for pcre2 fixes the following issue:

  • CVE-2025-58050: integer overflow leads to heap buffer overread in match_ref due to missing boundary restoration in SCS (bsc#1248842).
Record
SUSE-SU-2026:21172-1
Updated
2026-11-02
OSVUSN-7777-1No score

pcre2 vulnerability

It was discovered that PCRE2 incorrectly handled the Scan SubString verb. An attacker could possibly use this issue to cause applications using PCRE2 to expose sensitive information.

Record
USN-7777-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
pcre2
Alpine:v3.22
before 10.46-r0
10.46-r0
pcre2
Alpine:v3.23
before 10.46-r0
10.46-r0
pcre2
Alpine:v3.24
before 10.46-r0
10.46-r0
pcre2
Alpaquita:stream
10.45-r0 up to 10.46-r0
10.46-r0
pcre2
BellSoft Hardened Containers:stream
10.45-r0 up to 10.46-r0
10.46-r0
pcre2
Debian:13
before 10.46-1~deb13u1, plus listed versions
10.45-1
10.46-1~deb13u1
pcre2
Debian:14
before 10.46-1, plus listed versions
10.45-110.46-1~deb13u1
10.46-1
PCRE2_jll
Julia
10.45.0+0 up to 10.46.0+0
10.46.0+0
pcre2
PyPI
through 10.45, plus listed versions
0.1.00.2.00.3.00.4.00.5.0
Show 5 moreShow less
0.5.10.5.20.5.30.6.00.7.0
None known
pcre2
Root:Ubuntu:22.04
before 10.39-3ubuntu0.2.aikido.6
10.39-3ubuntu0.2.aikido.6
Show 7 moreShow less
Affected packages
PackageAffectedFixed
rootio-pcre2
Root:Ubuntu:22.04
before 10.39-3ubuntu0.2.aikido.6
10.39-3ubuntu0.2.aikido.6
pcre2
SUSE:Linux Micro 6.2
before 10.45-160000.3.1
10.45-160000.3.1
pcre2
SUSE:Linux Enterprise Server 16.0
before 10.45-160000.3.1
10.45-160000.3.1
pcre2
SUSE:Linux Enterprise Server for SAP applications 16.0
before 10.45-160000.3.1
10.45-160000.3.1
pcre2
Ubuntu:25.04
before 10.45-1ubuntu0.1, plus listed versions
10.42-4ubuntu310.45-1
10.45-1ubuntu0.1
pcre2
openSUSE:Tumbleweed
before 10.46-1.1
10.46-1.1
pcre2
openSUSE:Leap 16.0
before 10.45-160000.3.1
10.45-160000.3.1

History

History
RecordedChangedSources
affected, factsOSV
affected
first indexedCVE List, EUVD, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2025-58050 is a medium vulnerability (CVSS 6.9) in Pcre Pcre2, published August 27, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.86%, the 59th percentile. Fixed in pcre2 10.46-r0.

References

Show 9 moreShow less
PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open