CVE-2026-88341 | BDVDB-2026-377889 Detail

Description#

A reachable assertion vulnerability exists in YARA 4.5.8 when loading crafted .yrc compiled rule files. An attacker can provide a malicious file with an invalid arena configuration (num_buffers=0) that triggers an assertion failure in yr_arena_get_ptr(), causing the application to terminate.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12026-09-22Record published in the CVE List.
2. Version 22026-09-23Most recent update recorded in the CVE List.