CVE-2026-2903 | skvadrik re2c up to 4.4 src/parse/ast.cc check_and_merge_special_rules null pointer dereference (Issue 571)

A vulnerability identified as problematic has been detected in skvadrik re2c up to 4.4. Impacted is the function check_and_merge_special_rules of the file src/parse/ast.cc. This manipulation causes null pointer dereference.

The identification of this vulnerability is CVE-2026-2903. The attack can only be executed locally. Furthermore, there is an exploit available.

It is suggested to install a patch to address this issue.