Search/CVE-2022-1586
● CVE — Critical

CVE-2022-1586

Vendordebian, fedoraproject, netapp, redhat, pcreProductdebian linux, fedora, h300s firmware, h410c firmware, h410s firmware, h500s firmware, h700s firmware, enterprise linux, active iq unified manager, solidfire, hci management node, ontap select deploy administration utility, pcre2DiscoveredMay 16, 2022UpdatedMar 25, 2025

An out-of-bounds read vulnerability was discovered in the PCRE2 library in the compile_xclass_matchingpath() function of the pcre2_jit_compile.c file. This involves a unicode property matching issue in JIT-compiled regular expressions. The issue occurs because the character was not fully read in case-less matching within JIT.

CVSS v3.1
9.1 CRITICAL
EPSS
3.37%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
EPSS Trend
Aug 16, 2026 → Sep 15, 2026
▼ 0.01pp
3.38% → 3.37% over 3 tracked changes
CVSS v3.1 Detail
Attack VectorNETWORK
Attack ComplexityLOW
Privileges RequiredNONE
User InteractionNONE
ScopeUNCHANGED
ConfidentialityHIGH
IntegrityNONE
AvailabilityHIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Timeline
disclosure → media coverage
May 16, 2022
Disclosure — published as a CVE record. · last revised by NVD Mar 25, 2025