$ cve CVE-2022-1587 JSON

CVE-2022-1587

9.1

CRITICAL · CVSS 3.1 · EPSS 2.8% (pctl 86)

In your normal cycle

Critical by CVSS (9.1), but no sign of active exploitation.

Description

An out-of-bounds read vulnerability was discovered in the PCRE2 library in the get_recurse_data_length() function of the pcre2_jit_compile.c file. This issue affects recursions in JIT-compiled regular expressions caused by duplicate data transfers.

Scoring

CVSS	9.1 (CRITICAL, v3.1)
Vector	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
EPSS	2.77% — more likely to be exploited than 86% of all CVEs
Weakness	CWE-125
On CISA KEV	no
Public exploit	none known
Published	2022-05-16
Last modified	2026-06-17

Affected (17)

Vendor	Product
fedoraproject	fedora
netapp	active iq unified manager
netapp	h300s
netapp	h300s firmware
netapp	h410c
netapp	h410c firmware
netapp	h410s
netapp	h410s firmware
netapp	h500s
netapp	h500s firmware
netapp	h700s
netapp	h700s firmware
netapp	hci management node
netapp	ontap select deploy administration utility
netapp	solidfire
pcre	pcre2
redhat	enterprise linux

References

→ the Explorer · watch your stack · NVD