https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 22:29:23 +0000 https://vulnerability.circl.lu/vuln/fkie_cve-2026-88340 <p>An invalid pointer release vulnerability exists in YARA 4.5.8 during deserialization of compiled .yrc rule files. The vulnerability is caused by insufficient validation of external-variable pointers, which may lead to invalid free in yr_rules_destroy() or wild pointer access in yr_object_create(). An attacker can provide a specially crafted .yrc file that causes memory corruption and application crash.</p> <p>An invalid pointer release vulnerability exists in YARA 4.5.8 during deserialization of compiled .yrc rule files. The vulnerability is caused by insufficient validation of external-variable pointers, which may lead to invalid free in yr_rules_destroy() or wild pointer access in yr_object_create(). An attacker can provide a specially crafted .yrc file that causes memory corruption and application crash.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2026-88340 https://vulnerability.circl.lu/vuln/ghsa-f27p-cq5g-fr5x <p>An invalid pointer release vulnerability exists in YARA 4.5.8 during deserialization of compiled .yrc rule files. The vulnerability is caused by insufficient validation of external-variable pointers, which may lead to invalid free in yr_rules_destroy() or wild pointer access in yr_object_create(). An attacker can provide a specially crafted .yrc file that causes memory corruption and application crash.</p> <p>An invalid pointer release vulnerability exists in YARA 4.5.8 during deserialization of compiled .yrc rule files. The vulnerability is caused by insufficient validation of external-variable pointers, which may lead to invalid free in yr_rules_destroy() or wild pointer access in yr_object_create(). An attacker can provide a specially crafted .yrc file that causes memory corruption and application crash.</p> https://vulnerability.circl.lu/vuln/ghsa-f27p-cq5g-fr5x https://vulnerability.circl.lu/vuln/ubuntu-cve-2026-88340 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: yara, Ubuntu:Pro:18.04:LTS: yara, Ubuntu:Pro:20.04:LTS: yara, Ubuntu:Pro:22.04:LTS: yara, Ubuntu:24.04:LTS: yara, Ubuntu:26.04:LTS: yara</p> <p>An invalid pointer release vulnerability exists in YARA 4.5.8 during deserialization of compiled .yrc rule files. The vulnerability is caused by insufficient validation of external-variable pointers, which may lead to invalid free in yr_rules_destroy() or wild pointer access in yr_object_create(). An attacker can provide a specially crafted .yrc file that causes memory corruption and application crash.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: yara, Ubuntu:Pro:18.04:LTS: yara, Ubuntu:Pro:20.04:LTS: yara, Ubuntu:Pro:22.04:LTS: yara, Ubuntu:24.04:LTS: yara, Ubuntu:26.04:LTS: yara</p> <p>An invalid pointer release vulnerability exists in YARA 4.5.8 during deserialization of compiled .yrc rule files. The vulnerability is caused by insufficient validation of external-variable pointers, which may lead to invalid free in yr_rules_destroy() or wild pointer access in yr_object_create(). An attacker can provide a specially crafted .yrc file that causes memory corruption and application crash.</p> https://vulnerability.circl.lu/vuln/ubuntu-cve-2026-88340