CVE-2015-2326

score

<0.1

cvss

5.5

epss

1.6%

published

2020-01-14

kev added

—

first seen

2026-10-21

PCRE before 8.37 contains a denial of service caused by out-of-bounds read in pcre_compile2 function, letting context-dependent attackers cause crashes via crafted regular expressions with specific group references, exploit requires attacker to supply malicious regex.