← Back

Re2c

re2c

Vendor: Re2c • 3 CVEs

CVEs (3)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Re2c
1Re2c
Jun 17, 2026
Mar 29, 2022
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
A stack overflow re2c 2.2 exists due to infinite recursion issues in src/dfa/dead_rules.cc.
1Re2c
1Re2c
Nov 21, 2024
Apr 29, 2020
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
re2c before 2.0 has uncontrolled recursion that causes stack consumption in find_fixed_tags.
2Canonical
Re2c
2Re2c
Ubuntu Linux
Jun 17, 2026
Apr 21, 2020
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
re2c 1.3 has a heap-based buffer overflow in Scanner::fill in parse/scanner.cc via a long lexeme.