Search/CVE-2022-1587
● CVE — Critical

CVE-2022-1587

Vendorfedoraproject, netapp, redhat, pcreProductfedora, h300s firmware, h410c firmware, h410s firmware, h500s firmware, h700s firmware, enterprise linux, active iq unified manager, solidfire, hci management node, ontap select deploy administration utility, pcre2DiscoveredMay 16, 2022UpdatedNov 21, 2024

An out-of-bounds read vulnerability was discovered in the PCRE2 library in the get_recurse_data_length() function of the pcre2_jit_compile.c file. This issue affects recursions in JIT-compiled regular expressions caused by duplicate data transfers.

View graph Watch Export
CVSS v3.1
9.1 CRITICAL
EPSS
2.77%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
EPSS Trend
Aug 16, 2026 → Sep 15, 2026
▲ 0.04pp
2.72% → 2.77% over 3 tracked changes
CVSS v3.1 Detail
Attack VectorNETWORK
Attack ComplexityLOW
Privileges RequiredNONE
User InteractionNONE
ScopeUNCHANGED
ConfidentialityHIGH
IntegrityNONE
AvailabilityHIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Connections
13 relationships
Timeline
disclosure → media coverage
May 16, 2022
Disclosure — published as a CVE record. · last revised by NVD Nov 21, 2024