{"id":"CVE-2017-8399","details":"PCRE2 before 10.30 has an out-of-bounds write caused by a stack-based buffer overflow in pcre2_match.c, related to a \"pattern with very many captures.\"","modified":"2026-03-14T14:30:39.450329Z","published":"2017-05-01T18:59:00.403Z","references":[{"type":"WEB","url":"https://vcs.pcre.org/pcre2/code/tags/pcre2-10.30/ChangeLog?revision=854&view=markup"},{"type":"ADVISORY","url":"http://www.securityfocus.com/bid/98315"},{"type":"ADVISORY","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=783"},{"type":"ADVISORY","url":"https://security.gentoo.org/glsa/201710-09"},{"type":"FIX","url":"https://vcs.pcre.org/pcre2?view=revision&revision=674"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/pcre2project/pcre2","events":[{"introduced":"0"},{"fixed":"921b0ae10fe26bdb979f70ec9512b9f95e3ddccb"}],"database_specific":{"versions":[{"introduced":"0"},{"fixed":"10.30"}]}}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-8399.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}]}