CVE-2022-23901: RE2C

Critical severity, CVSS 9.8. EPSS: 1.6% chance of exploitation in the next 30 days.

A stack overflow re2c 2.2 exists due to infinite recursion issues in src/dfa/dead_rules.cc.

Affected products

• RE2C RE2C: version 2.2 only

Published 2022-03-29. Last modified 2026-06-17.