CVE-2015-8384

CVE-2015-8384 describes a denial-of-service vulnerability in PCRE (Perl Compatible Regular Expressions) versions prior to 8.38. This flaw, affecting products like Konqueror, arises from improper handling of specific recursive back-references in regular expressions, such as /(?J)(?'d'(?'d'\g{d}))/. With a CVSS score of 7.5, this vulnerability is considered highly severe, allowing unauthenticated remote attackers to trigger a buffer overflow and potentially achieve other unspecified impacts with low attack complexity. While the EPSS score is low, indicating a low probability of exploitation, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.