CVE-2008-0172: Boost

Medium severity, CVSS 5.0. EPSS: 2% chance of exploitation in the next 30 days.

The get_repeat_type function in basic_regex_creator.hpp in the Boost regex library (aka Boost.Regex) in Boost 1.33 and 1.34 allows context-dependent attackers to cause a denial of service (NULL dereference and crash) via an invalid regular expression.

Affected products

• Boost Boost: version 1.33 only; version 1.34 only

Published 2008-01-17. Last modified 2026-06-16.