PCRE2 10.48 and earlier: JIT matching with a growable JIT stack (pcre2_jit_stack_create()/pcre2_jit_stack_assign()) can write out of bounds. The stack-resize path grows the stack limit by a fixed step without re-checking a larger frame allocation, so an attacker-controlled pattern with high JIT stack usage (e.g. many capturing groups) triggers an out-of-bounds write with attacker-influenced data. Only builds with JIT support enabled are affected (the Conan recipe's support_jit option defaults to False). Fixed in 10.49.