Description (CNA)
In YARA 3.7.1 and prior, parsing a specially crafted compiled rule file can cause an out of bounds read vulnerability in yr_execute_code in libyara/exec.c.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://github.com/VirusTotal/yara/issues/891
- https://bnbdr.github.io/posts/swisscheese/
- https://github.com/bnbdr/swisscheese
ADP enrichment
No English description supplied.