CVE-2026-89161

Summary

In PCRE2 before 10.48, pcre2_jit_match mishandles a previously copied subject being passed in as a context. An incorrect free operation can occur.

Published 2026-09-11 · first seen here 2026-10-10

Hunt & detect

Threat hunt brief, Sigma rule and Splunk / Sentinel / CrowdStrike queries are not available for this item yet.

References

• NVD entry
• https://github.com/PCRE2Project/pcre2/pull/937
• https://github.com/PCRE2Project/pcre2/releases/tag/pcre2-10.48