CVE-2026-88341

A reachable assertion vulnerability exists in YARA 4.5.8 when processing crafted .yrc compiled rule files . An attacker can provide a malicious file containing an invalid arena configuration (num_buffers=0 ), which triggers an assertion failure within the yr_arena_get_ptr() function. This flaw re...

CVE-2026-88341

A reachable assertion vulnerability exists in YARA 4.5.8 when loading crafted .yrc compiled rule files. An attacker can provide a malicious file with an invalid arena configuration numbuffers=0 that triggers an assertion failure in yrarenagetptr, causing the application to terminate...