CVE-2008-0674: Pcre

High severity, CVSS 7.5. EPSS: 5.9% chance of exploitation in the next 30 days.

Buffer overflow in PCRE before 7.6 allows remote attackers to execute arbitrary code via a regular expression containing a character class with a large number of characters with Unicode code points greater than 255.

Affected products

• Pcre Pcre: up to and including 7.5

Published 2008-02-18. Last modified 2026-06-16.