{"id":"CVE-2022-41409","details":"Integer overflow vulnerability in pcre2test before 10.41 allows attackers to cause a denial of service or other unspecified impacts via negative input.","modified":"2026-08-12T13:33:19.491838Z","published":"2023-07-18T00:00:00Z","related":["SUSE-SU-2023:3210-1","SUSE-SU-2023:3327-1","SUSE-SU-2023:3328-1"],"database_specific":{"cna_assigner":"mitre","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/41xxx/CVE-2022-41409.json"},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/41xxx/CVE-2022-41409.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-41409"},{"type":"REPORT","url":"https://github.com/PCRE2Project/pcre2/issues/141"},{"type":"FIX","url":"https://github.com/PCRE2Project/pcre2/commit/94e1c001761373b7d9450768aa15d04c25547a35"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/pcre2project/pcre2","events":[{"introduced":"0"},{"fixed":"7c49b40e8aed10cc2667dd3c4b7bb692d13ade2a"},{"fixed":"94e1c001761373b7d9450768aa15d04c25547a35"}],"database_specific":{"extracted_events":[{"introduced":"0"},{"fixed":"10.41"}],"source":["CPE_RANGE","REFERENCES"],"cpe":"cpe:2.3:a:pcre:pcre2:*:*:*:*:*:*:*:*"}}],"versions":["pcre2-10.40","pcre2-10.39","pcre2-10.38","pcre2-10.38-RC1"],"database_specific":{"vanir_signatures_modified":"2026-08-12T13:33:19Z","vanir_signatures":[{"target":{"file":"src/pcre2test.c"},"deprecated":false,"digest":{"line_hashes":["62489852517137625250442895310532729877","201713021635601015043319097914336087915","322293490913182853245187905827756638256","207896007219727419804105114721414926380","252707345794246848607483269209822253197","132236701326433796789918249164278653346"],"threshold":0.9},"id":"CVE-2022-41409-0118e1b8","signature_type":"Line","signature_version":"v1","source":"https://github.com/pcre2project/pcre2/commit/94e1c001761373b7d9450768aa15d04c25547a35"},{"deprecated":false,"digest":{"function_hash":"291611100143254405593915313093031444199","length":539},"id":"CVE-2022-41409-7b620d9d","signature_type":"Function","signature_version":"v1","source":"https://github.com/pcre2project/pcre2/commit/7c49b40e8aed10cc2667dd3c4b7bb692d13ade2a","target":{"file":"src/pcre2_compile.c","function":"pcre2_code_free"}},{"deprecated":false,"digest":{"function_hash":"337203437419393383331572633756157855685","length":30670},"id":"CVE-2022-41409-9947a8ff","signature_type":"Function","signature_version":"v1","source":"https://github.com/pcre2project/pcre2/commit/94e1c001761373b7d9450768aa15d04c25547a35","target":{"file":"src/pcre2test.c","function":"process_data"}},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/pcre2project/pcre2/commit/7c49b40e8aed10cc2667dd3c4b7bb692d13ade2a","target":{"file":"src/pcre2_compile.c"},"deprecated":false,"digest":{"line_hashes":["117830070775128279011952155861404518978","301724993596358088212685145666150882560","39920358135339226743147736293932035663","71557052945412493880793540225677577445"],"threshold":0.9},"id":"CVE-2022-41409-c4580d87"}],"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-41409.json"}}],"schema_version":"1.9.0"}