CVE-2017-11164: Pcre

High severity, CVSS 7.5. EPSS: 3.1% chance of exploitation in the next 30 days.

In PCRE 8.41, the OP_KETRMAX feature in the match function in pcre_exec.c allows stack exhaustion (uncontrolled recursion) when processing a crafted regular expression.

Affected products

• Pcre Pcre: version 8.41 only

Published 2017-07-11. Last modified 2026-06-17.