A flaw was found in YARA. This invalid pointer release vulnerability occurs during the deserialization of compiled rule files (.yrc). An attacker can exploit this by providing a specially crafted .yrc file, leading to insufficient validation of external-variable pointers. This can result in memory corruption and cause the application to crash, leading to a denial of service.
Last checked: 2026-09-25 21:39 UTC
No exploitation evidence · CISA Coordinator (Assessed 2026-09-25 19:47 UTC)
Fix evidence last checked: 2026-09-23 08:17 UTC