libpcre1 in PCRE 8.40 and libpcre2 in PCRE2 10.23 allow remote attackers to cause a denial of service (segmentation violation for read access, and application crash) by triggering an invalid Unicode property lookup.
{
"unresolved_ranges": [
{
"source": "CPE_FIELD",
"cpes": [
"cpe:2.3:a:pcre:pcre:8.40:*:*:*:*:*:*:*"
],
"vendor_product": "pcre:pcre",
"extracted_events": [
{
"last_affected": "8.40"
}
]
}
]
}