CVE-2014-9769: pcre_jit_compile.c in PCRE 8.35 does not properly use table jumps to optimize nested alternatives, which al...

Security readout for executives and security teams

PCRE 8.35 can mishandle certain complex regular-expression matches when JIT compilation is used. A remote input may trigger a crash through stack memory corruption, causing service disruption in software that relies on PCRE for traffic or content inspection. Exposure is most likely in systems embedding PCRE 8.35 with JIT enabled, especially network inspection or filtering tools processing untrusted traffic. The bundle does not provide complete affected product or version ranges. Prioritize where PCRE JIT processes internet-facing or untrusted traffic. Treat as an availability risk first, with incomplete evidence for broader impact. Patch through normal vendor channels once exposure is confirmed. Mitigation focus: Inventory software that embeds PCRE 8.35 or distribution PCRE packages.; Check vendor and distribution advisories for the PCRE fix status.; Apply patched PCRE or application packages where vendor guidance exists..

Prepared

Jun 13, 2026, 14:44 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.