« List of all CVEs

CVE-2021-3402

Published: 5/14/2021 Last updated: 8/3/2024 Reserved: 2/8/2021

An integer overflow and several buffer overflow reads in libyara/modules/macho/macho.c in YARA v4.0.3 and earlier could allow an attacker to either cause denial of service or information disclosure via a malicious Mach-O file. Affects all versions before libyara 4.0.4

CNA assigner: redhat (53f830b8-0a3f-465b-8143-3b8a9948e749) Requested by: n/a

Opam packages affected (1)

yara

Products affected (1)

Product Vendor Version
libyara n/a n/a

References (10)