CVE-2026-67550— re2: Out-of-bounds heap read in `exec`/`test`/`match` via attacker-influenced `lastIndex` on a non-ASCII subject → uncatchable process crash (DoS)
Possible ATT&CK Techniques 1AI
T1203 · Exploitation for Client ExecutionGet alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-67550
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
re2: Out-of-bounds heap read in `exec`/`test`/`match` via attacker-influenced `lastIndex` on a non-ASCII subject → uncatchable process crash (DoS)
Source: CVE Program / CVE List V5
Vulnerability Description
re2 provides Node.js bindings for Google's RE2 regular expression engine. Prior to 1.25.2, re2 validates lastIndex against the UTF-8 byte length of a subject but uses it as a UTF-16 code-unit offset in exec, test, match, replace, and split, allowing an attacker-influenced lastIndex on a non-ASCII subject to trigger an out-of-bounds heap read and an uncatchable process crash, with limited heap information disclosure in some cases. This issue is fixed in 1.25.2.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
跨界内存读
Source: CVE Program / CVE List V5
Affected Products
II. Public POCs for CVE-2026-67550
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-67550
请登录查看更多情报信息。
Patches & Fixes for CVE-2026-67550 (1)
Vendor Advisories for CVE-2026-67550 (1)
Vendor Pages for CVE-2026-67550 (1)
- 🔗 Release Release 1.25.2 · uhop/node-re2 · GitHubx_refsource_MISC
IV. Related Vulnerabilities
Same weakness: CWE-125
- CVE-2026-19955
TrailDB TOC Validation tdb.c tdb_open out-of-bounds - CVE-2026-49282
Capstone M68K and RISCV `cs_insn_name()` invalid IDs can tri - CVE-2026-18020
IBM i is Affected By Multiple Vulnerabilities in NetServer - CVE-2026-17649
IBM i is Affected By Multiple Vulnerabilities in NetServer - CVE-2026-17226
IBM i is Affected By Multiple Vulnerabilities in NetServer
V. Comments for CVE-2026-67550
No comments yet