← Back
CWE-185

41 CVEs • Abstraction: Class

Incorrect Regular Expression

The product specifies a regular expression in a way that causes data to be improperly matched or compared.

JSON object

Loading...

CVEs (41)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2015-8388
2Oracle
Pcre
2Linux
Perl Compatible Regular Expression Library
May 6, 2026
Dec 2, 2015
N/A· v4
N/A· v3
7.5 HIGH· v2
PCRE before 8.38 mishandles the /(?=di(?<=(?1))|(?=(.))))/ pattern and related patterns with an unmatched closing parenthesis, which allows remote attackers to cause a denial of service (buffer overflow) or possibly have...Show more
PCRE before 8.38 mishandles the /(?=di(?<=(?1))|(?=(.))))/ pattern and related patterns with an unmatched closing parenthesis, which allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror.Show less