High severity7.8OSV Advisory· Published Jun 15, 2018· Updated Jun 17, 2026
CVE-2018-12035
CVE-2018-12035
Description
In YARA 3.7.1 and prior, parsing a specially crafted compiled rule file can cause an out of bounds write vulnerability in yr_execute_code in libyara/exec.c.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2v2.0.0, v2.1.0, v3.0.0, …+ 1 more
- (no CPE)range: v2.0.0, v2.1.0, v3.0.0, …
- (no CPE)range: <=3.7.1
Patches
Vulnerability mechanics
References
2- github.com/VirusTotal/yara/issues/891nvdIssue TrackingPatchThird Party Advisory
- bnbdr.github.io/posts/swisscheese/nvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.