Lucene search
+L

3 matches found

Github Security Blog
Github Security Blog
•added 2026/09/24 7:09 p.m.•22 views

yara-x: Unvalidated deserialization in safe `Rules::deserialize` allows memory corruption and UB

!NOTE This finding was identified during an agentic unsafe Rust code review performed by Gemini AI, followed by human review and verification. The Issue The crate exports a public safe API Rules::deserialize accepting any generic byte sequence B: AsRef. It restores compiled rule structures direct...

6.4AI score
SaveExploits0References4Affected Software1
osv_ghsa
osv_ghsa
•added 2026/09/24 7:09 p.m.•15 views

GHSA-2JX3-FF3V-J7JJ yara-x: Unvalidated deserialization in safe `Rules::deserialize` allows memory corruption and UB

!NOTE This finding was identified during an agentic unsafe Rust code review performed by Gemini AI, followed by human review and verification. The Issue The crate exports a public safe API Rules::deserialize accepting any generic byte sequence B: AsRef. It restores compiled rule structures direct...

4.8CVSS6.4AI score
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/09/24 12:00 a.m.•11 views

PT-2026-105471

!NOTE This finding was identified during an agentic unsafe Rust code review performed by Gemini AI, followed by human review and verification. The Issue The crate exports a public safe API Rules::deserialize accepting any generic byte sequence B: AsRef. It restores compiled rule structures direct...

4.8CVSS6.5AI score
SaveExploits0References5
Rows per page
Query Builder