CVE-2020-14155: Apple macOS

Medium severity, CVSS 5.3. EPSS: 4.2% chance of exploitation in the next 30 days.

libpcre in PCRE before 8.44 allows an integer overflow via a large number after a (?C substring.

Affected products

• Apple macOS: before 11.0.1 (fixed in 11.0.1)
• GitLab GitLab: before 12.10.13 (fixed in 12.10.13); from 13.0.0, before 13.0.8 (fixed in 13.0.8); from 13.1.0, before 13.1.2 (fixed in 13.1.2)
• Netapp Active Iq Unified Manager: affected versions not specified
• Netapp Cloud Backup: affected versions not specified
• Netapp Clustered Data Ontap: affected versions not specified
• Netapp h300s Firmware: affected versions not specified
• Netapp h410c Firmware: affected versions not specified
• Netapp h410s Firmware: affected versions not specified
• Netapp h500s Firmware: affected versions not specified
• Netapp h700s Firmware: affected versions not specified
• Netapp Ontap Select Deploy Administration Utility: affected versions not specified
• Netapp Steelstore Cloud Integrated Storage: affected versions not specified
• Oracle Communications Cloud Native Core Policy: version 1.15.0 only
• Pcre Pcre: before 8.44 (fixed in 8.44)
• Splunk Universal Forwarder: from 8.2.0, before 8.2.12 (fixed in 8.2.12); from 9.0.0, before 9.0.6 (fixed in 9.0.6); version 9.1.0 only

Published 2020-06-15. Last modified 2026-10-08.