Homepage

Out-of-bounds Write The advisory has been revoked - it doesn't affect any version of package mariadb-embedded-devel  (opens in a new tab)

Threat Intelligence

EPSS
0.39% (31st percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-CENTOS10-MARIADBEMBEDDEDDEVEL-19690622
  • published12 Sept 2026
  • disclosed5 Sept 2026
Report a new vulnerability Found a mistake?

Introduced: 5 Sep 2026

CVE-2026-86145  (opens in a new tab)
CWE-787  (opens in a new tab)

Amendment

The Centos security team deemed this advisory irrelevant for Centos:10.

NVD Description

Note: Versions mentioned in the description apply only to the upstream mariadb-embedded-devel package and not the mariadb-embedded-devel package as distributed by Centos.

PCRE2 before 10.48 allows a pcre2_dfa_match out-of-bounds write because reuse of a cached workspace block, in a recursive DFA matching workspace, lacks a size check (even though a newly allocated block, for the same purpose, does have a size check). This outcome requires an attacker-controlled regular expression, or a recursive pattern in conjunction with a small heap limit (this can be set through the API).