https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T23:20:03.243889+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2019-32348 cnvd-2019-32348 2026-10-02T23:20:03.247608+00:00 cnvd-2019-32348 https://cve.radiocsirt.org/vuln/euvd-2026-70050 EUVD-2026-70050 2026-10-02T23:20:03.247640+00:00 EUVD-2026-70050 https://cve.radiocsirt.org/vuln/fkie_cve-2018-19974 fkie_cve-2018-19974 2026-10-02T23:20:03.247653+00:00

In YARA 3.8.1, bytecode in a specially crafted compiled rule can read uninitialized data from VM scratch memory in libyara/exec.c. This can allow attackers to discover addresses in the real stack (not the YARA virtual stack).

 https://cve.radiocsirt.org/vuln/ghsa-qgr5-73wm-7w3g GHSA-qgr5-73wm-7w3g 2026-10-02T23:20:03.247679+00:00

In YARA 3.8.1, bytecode in a specially crafted compiled rule can read uninitialized data from VM scratch memory in libyara/exec.c. This can allow attackers to discover addresses in the real stack (not the YARA virtual stack).

 https://cve.radiocsirt.org/vuln/gsd-2018-19974 gsd-2018-19974 2026-10-02T23:20:03.247694+00:00 gsd-2018-19974 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-19974 UBUNTU-CVE-2018-19974 2026-10-02T23:20:03.247704+00:00

Affected: Ubuntu:Pro:16.04:LTS: yara, Ubuntu:Pro:18.04:LTS: yara

In YARA 3.8.1, bytecode in a specially crafted compiled rule can read uninitialized data from VM scratch memory in libyara/exec.c. This can allow attackers to discover addresses in the real stack (not the YARA virtual stack).