https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 23:19:57 +0000 https://cve.radiocsirt.org/vuln/cnvd-2019-32348 cnvd-2019-32348 https://cve.radiocsirt.org/vuln/cnvd-2019-32348 https://cve.radiocsirt.org/vuln/euvd-2026-70050 EUVD-2026-70050 https://cve.radiocsirt.org/vuln/euvd-2026-70050 https://cve.radiocsirt.org/vuln/fkie_cve-2018-19974 <p>In YARA 3.8.1, bytecode in a specially crafted compiled rule can read uninitialized data from VM scratch memory in libyara/exec.c. This can allow attackers to discover addresses in the real stack (not the YARA virtual stack).</p> <p>In YARA 3.8.1, bytecode in a specially crafted compiled rule can read uninitialized data from VM scratch memory in libyara/exec.c. This can allow attackers to discover addresses in the real stack (not the YARA virtual stack).</p> https://cve.radiocsirt.org/vuln/fkie_cve-2018-19974 https://cve.radiocsirt.org/vuln/ghsa-qgr5-73wm-7w3g <p>In YARA 3.8.1, bytecode in a specially crafted compiled rule can read uninitialized data from VM scratch memory in libyara/exec.c. This can allow attackers to discover addresses in the real stack (not the YARA virtual stack).</p> <p>In YARA 3.8.1, bytecode in a specially crafted compiled rule can read uninitialized data from VM scratch memory in libyara/exec.c. This can allow attackers to discover addresses in the real stack (not the YARA virtual stack).</p> https://cve.radiocsirt.org/vuln/ghsa-qgr5-73wm-7w3g https://cve.radiocsirt.org/vuln/gsd-2018-19974 gsd-2018-19974 https://cve.radiocsirt.org/vuln/gsd-2018-19974 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-19974 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: yara, Ubuntu:Pro:18.04:LTS: yara</p> <p>In YARA 3.8.1, bytecode in a specially crafted compiled rule can read uninitialized data from VM scratch memory in libyara/exec.c. This can allow attackers to discover addresses in the real stack (not the YARA virtual stack).</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: yara, Ubuntu:Pro:18.04:LTS: yara</p> <p>In YARA 3.8.1, bytecode in a specially crafted compiled rule can read uninitialized data from VM scratch memory in libyara/exec.c. This can allow attackers to discover addresses in the real stack (not the YARA virtual stack).</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-19974