← Back to CVE List

CVE-2018-19974

Published: 2018-12-17T19:29Z
Last Modified: 2024-11-21T03:58Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
In YARA 3.8.1, bytecode in a specially crafted compiled rule can read uninitialized data from VM scratch memory in libyara/exec.c. This can allow attackers to discover addresses in the real stack (not the YARA virtual stack). > MITRE Terms of Use apply – see LICENSE‑MITRE.txt