Loading HuntDB...

GHSA-xxqj-m8p7-rjq7

GitHub Security Advisory

⚠ Unreviewed HIGH Has CVE

Advisory Details

The sized_string_cmp function in libyara/sizedstr.c in YARA 3.5.0 allows remote attackers to cause a denial of service (use-after-free and application crash) via a crafted rule.

Related CVEs

Key Information

GHSA ID
GHSA-xxqj-m8p7-rjq7
Published
May 17, 2022 2:44 AM
Last Modified
May 17, 2022 2:44 AM
CVSS Score
7.5 /10
Primary Ecosystem
Unknown
Primary Package
Unknown
GitHub Reviewed
✗ No

Dataset

Last updated: August 31, 2025 6:33 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.